Loose networks sink ships

Despite evidence that adversaries are "targeting systems for remote sabotage," Defense Department cybersecurity today is closer to cleaning up after network penetrations rather than stopping them in real time, said the new head of U.S. Cyber Command, Army Gen. Keith Alexander.

The newly inaugurated Cyber Command combines two previously separated offensive- and defensive-capability joint cyber organizations within a single command located at Ft. Meade, Md., where Alexander also heads up the National Security Agency. Alexander spoke publically June 3 for the first time since officially assuming control of Cyber Command on May 21 at an event hosted by the Center for Strategic and International Studies.

"We have no situational awareness. It's very limited," Alexander said. "Often times, our situational awareness is, indeed, forensics, which means that something has happened," he added. Military networks, of course, are complex; the DoD has more than 7 million networked computers operating in 15,000 networks with 21 satellite gateways and 20,000 commercial circuits, Alexander said.

Neither are military networks bounded by the .mil domain, he added. Private sector networks also contain sensitive military information, Alexander added.

William Lynn, the department's second highest-ranking civilian, suggested May 26 that the Pentagon could create a government-sponsored cybersecurity regime for operators of critical private sector infrastructure.

Alexander said that the Pentagon will not give preferential treatment to any particular private-sector company and will work with the Homeland Security Department when it comes to defense industrial base securing networks.

Alexander also said a Russian proposal for cyber warfare arms limitation treaty could be a starting point for international debate on limiting cyber warfare.

For more:
- watch a video of Gen. Alexander's speaking at the CSIS event
- read a transcript of the event (.pdf)

Related Articles:
DoD could defend critical private sector infrastructure from cyber attack
Lynn: Cyberspace same as land, sea, air and space
Rules of engagement complicate DoD cyber operations