Cyber Security
January 2006
BNA's Web Watch is prepared by Laura
Gordon-Murnane. E-mail suggestions for future weekly topics
always welcome.
Federal Government
Congressional Hearings
October 27, 2005: House Armed Services Committee
The Asymmetric
and Unconventional Threats Panel met to receive testimony on Cyber
Security, Information Assurance and Information Superiority.
(audio)
Witnesses:
Eugene Spafford, Ph.D., Professor, Purdue University, Member, President's
Information Technology Advisory Committee
Mr. David Grawrock, Principle Engineer and Security Architect,
Intel Corporation
Mr.
Paul B. Kurtz, Executive Director, Cyber Security Industry Alliance
Testimony of CSIA Executive Director Paul Kurtz
House Homeland Security Subcommittee on Economic Security,
Infrastructure, Protection, and Cybersecurity Joint Hearing with
the Subcommittees on Economic Security, Infrastructure Protection,
and Cybersecurity and Emergency Preparedness, Science, and Technology:
“SCADA and the Terrorist Threat: Protecting the Nation’s
Critical Control Systems” Oct. 18, 2005
Witnesses
Mr.
Donald “Andy” Purdy - Acting Director, National
Cybersecurity Division U.S. Department of Homeland Security
Mr.
Larry Todd - Director of Security, Safety and Law Enforcement
Bureau of Reclamation,
U.S. Department of the Interior
Dr.
Sam Varnado - Director, Information Operations Center Sandia
National Laboratory
Dr.
KP Ananth
Associate Laboratory Director, National & Homeland Security
Idaho National Laboratory
Dr.
William Rush
Institute Physicist, Gas Technology Institute
Mr.
Alan Paller
Director of Research, The SANS Institute
Congressional Research Service Reports
Terrorist Capabilities for Cyberattack: Overview and Policy Issues
October 20, 2005
Critical Infrastructure
and Key Assets: Definition and Identification (October 1, 2004)
Government Accountability Office
CRITICAL INFRASTRUCTURE
PROTECTION Department of Homeland Security Faces Challenges in Fulfilling
Cybersecurity Responsibilities (May 2005)
INFORMATION SECURITY
Emerging Cybersecurity Issues Threaten Federal Information Systems
(May 2005)
Federal Register
U.S.
cyber-infrastructure (70 Fed. Reg. 66,840, 11/3/05).
Department of Homeland Security
Draft
National Infrastructure Protection Plan (Available via Politechbot)
Evaluation
of DHS' Information Security Program for Fiscal Year 2005
“Improved
Security Required For U.S. Customs and Border Protection Networks
(Redacted)
“Improved
Security Required For U.S. Secret Service Networks (Redacted)”
“Security
Weaknesses Increase Risks to Critical United States Secret Service
Database (Redacted)”
National
Infrastructure Advisory Council
Nongovernment Organizations
CIO/Pricewaterhousecoopers
The
Global State of Information Security 2005 (September 2005)
Cyber Security Industry
Alliance (CSIA)
National
Agenda for Cyber Security
Digital
Confidence Index
Press
Release: "Headline" December 13, 2005
CSIA
Backgrounder
Graphs
from National Press Club presentation
Federal
Funding for Cyber Security R&D Findings and Recommendation by
the
Cyber Security Industry Alliance (July 2005)
Policy
Considerations for Securing Electronic Data CYBER SECURITY INDUSTRY
ALLIANCE (APRIL 2005)
SANS Institute
The Twenty
Most Critical Internet Security Vulnerabilities (Updated) ~ The
Experts Consensus Version 6.01 (November 28, 2005)
|