Language Selection

English French German Italian Portuguese Spanish

Homeland Security budget boosts cybersecurity

Filed under

Information security could get greater focus now that the House budget bill calls for creating a high-level cybersecurity position at the Homeland Security Department.

DHS would get $34.2 billion in fiscal 2006 as the result of a bill that received almost unanimous approval in the House last week. It is the department's first complete reauthorization since the Homeland Security Act creating DHS was passed in 2002.

By a vote of 424-4, House members approved a bill that, among other things, provides support for information sharing within DHS and with other federal, state and local agencies. It would accelerate the development of new technologies and aggressively recruit new talent.

A groundbreaking element in the bill makes cybersecurity a greater priority for the government. It would create an assistant secretary for cybersecurity in the Information Analysis and Infrastructure Protection Directorate. The person in that position would replace the current director of the National Cybersecurity Division and would oversee that division and the National Communications System.

The promotion of the cybersecurity chief is a "significant step forward to properly address the cybersecurity challenges of the nation," said Amit Yoran, former director of DHS' National Cybersecurity Division and founder of Yoran Associates, a consulting group.

"The new cybersecurity chief's greatest impact can be to better integrate cyber programs and thinking about cybersecurity across the department's initiatives," he said.

The next critical step for the new assistant secretary and the department is refining DHS' cybersecurity mission, Yoran said. They must target specific programs to reach those objectives and make sure those actions are accomplished, Yoran added.

Establishing better communication within the government and with and among the private sector, which owns nearly 90% of the nation's critical infrastructure, will be crucial for success, Yoran said.

Full Article.

More in Tux Machines

KTU exams to run on open source software

All examinations of the A.P.J. Abdul Kalam Technological University (KTU) — which run on an online platform — would switch to open source software from the second semester onwards. For the first semester examinations, the KTU would use a proprietary, Microsoft, software. In response to demands from student organisations, the KTU has pushed back its first semester examinations by two days. The first of the examinations would now begin on December 4 instead of December 2. The first of the results would be published on December 19. Read more Also: KTU goes ahead with exam outsourcing

CMS News

Security Leftovers

  • Friday's security updates
  • Researchers poke hole in custom crypto built for Amazon Web Services
    Underscoring just how hard it is to design secure cryptographic software, academic researchers recently uncovered a potentially serious weakness in an early version of the code library protecting Amazon Web Services. Ironically, s2n, as Amazon's transport layer security implementation is called, was intended to be a simpler, more secure way to encrypt and authenticate Web sessions. Where the OpenSSL library requires more than 70,000 lines of code to execute the highly complex TLS standard, s2n—short for signal to noise—has just 6,000 lines. Amazon hailed the brevity as a key security feature when unveiling s2n in June. What's more, Amazon said the new code had already passed three external security evaluations and penetration tests.
  • Social engineering: hacker tricks that make recipients click
    Social engineering is one of the most powerful tools in the hacker's arsenal and it generally plays a part in most of the major security breaches we hear about today. However, there is a common misconception around the role social engineering plays in attacks.
  • Judge Gives Preliminary Approval to $8 Million Settlement Over Sony Hack
    Sony agreed to reimburse employees up to $10,000 apiece for identity-theft losses
  • Cyber Monday: it's the most wonderful time of year for cyber-attackers
    Malicious attacks on shoppers increased 40% on Cyber Monday in 2013 and 2014, according to, an anti-malware and spyware company, compared to the average number of attacks on days during the month prior. Other cybersecurity software providers have identified the December holiday shopping season as the most dangerous time of year to make online purchases. “The attackers know that there are more people online, so there will be more attacks,” said Christopher Budd, Trend Micro’s global threat communications manager. “Cyber Monday is not a one-day thing, it’s the beginning of a sustained focus on attacks that go after people in the holiday shopping season.”

Openwashing (Fake FOSS)