All News

DHS wants to keep cyber role

Officials cite growing momentum on existing plans

Federal News Network Staff

September 24, 2008 7:33 am

3 min read

By Jason Miller
Executive Editor
FederalNewsRadio

Robert Jamison wants it to be known: the Homeland Security Department is the appropriate place for the government’s cybersecurity oversight and policy coordination.

The Under Secretary for the National Protection and Programs Directorate at DHS says taking this responsibility away now would be a mistake.

The Commission on Cyber Security for the 44th presidency will recommend in November that the next administration give the White House the responsibility to oversee and coordinate the policy around federal and military network defense.

Jamison, who spoke to FederalNewsRadio via phone, says DHS recognizes the changing and more complex threats agencies face.

“This is the first time we have a consolidated interagency strategy,” he says. “We have real momentum. We don’t want to restructure programs or the reporting structure while we are making progress.”

Jamison says DHS is doing many of the things the Government Accountability Office and other critics say they need to do.

This includes expanding the cybersecurity budget, better information sharing across government and with the private sector and better analytical capabilities.

Jamison offered some examples of what the department is doing in each of these areas.

For instance, DHS is testing the second version of its Einstein federal intrusion protection software.

Einstein 2 will give agencies and DHS real-time analysis of network traffic as well as improved intrusion protection capabilities.

“All agencies will have a comprehensive intrusion protection system,” he says. “And we will be able to program the capabilities with a broader knowledge of interagency trends.”

Einstein 2 also will let DHS look for anomalies in Internet traffic.

“We will strictly scan for malicious code,” Jamison says. “We will not be at the individual page levels.”

DHS has deployed Einstein 2 in a test environment and still is working out the protocols, procedures and policies, he adds.

In the next month or so, DHS will deploy the software at five agencies. Jamison says the department will see how it goes and begin deploying Einstein 2 across the rest of government over the next year.

Another example of what DHS is doing is Project 12.

Jamison says Project 12 is aimed to improve federal government communication with private industry.

“What can we do to break down barriers to get more situation awareness from the private sector?” he asks. “There are some hurdles and concerns about sharing vulnerabilities that we will have to deal with.”

Jamison says over the next few months DHS and industry representatives will detail a plan to improve these efforts.

DHS also is working with the White House and other agencies on a federal deterrent strategy.

Jamison would not offer too many details of the plan, citing the classified nature of the subject.

“We need to have a more consistent policy across the federal government,” he says. “We are concerned about the frequency of cyber intrusions on federal networks and the fact they are becoming more complex.”

Jamison adds that it is too early to say whether the strategy would ever become public.

—–

On the Web:

FederalNewsRadio – Commission to recommend DHS loses cybersecurity oversight role

FederalNewsRadio – U.S. needs new cyber doctrine

Homeland Security Department – National Protection and Programs directorate