Joe Biden's Cyber ​​Security Priorities: Fixing Damage from Solar Winds Attack, Working with Allies

Joe Biden's Cyber ​​Security Priorities: Fixing Damage from Solar Winds Attack, Working with Allies

Several cyber priority issues will be one of several initial priorities for the 46th President of the United States, Joseph Biden.

These include responding to a recent cyber attack from nation-states, reorganizing and reevaluating cyber in Washington, and encouraging allies to adopt more integrated perspectives on issues such as Internet governance and cyber norms.

However, an American expert says the biggest task will be to ensure that the government keeps the bureaucracy focused on fixing the damage caused to government departments by the hack of solar systems.

"The bus workaround would be a far greater task of network forensics and imaging, wiping and rebuilding potentially infected hosts," said Adam Isles, head and head of the cyber security team at the Washington-based Chertoff Group. Isles was the US representative on the G8 High-Tech Crimes Expert Group and worked on the security plan for Obama's inauguration in 2009.

"This requires three levels of attention: Level one is remedial. We know that the Treasury, the Department of Homeland Security, the State and the Defense have compromised."

Level two should look at what the attack says about the government's supply chain security. Software lifecycle security is not dealt with extensively under the National Institute of Technology (NIST) cybersecurity framework, Isles.

The third issue stems from the attack, when it has been decided that it is appropriate by civilian government agencies to seek help from the US Army's cyber command and its resources.

He also raised the possibility that Biden would support federal personal data protection and privacy legislation covering the private sector. Right now, only states have privacy laws, and some are similar. "I hope you will be seeing something from where you want to go on privacy, in relatively short order," Isles said.

"I have lived in D.C. [in the District of Columbia] for 23 years and was here for the last inauguration," he said. “The city is closed in a way not seen before. This is a statement about the amount of medicine as a country in the next weeks and months. "

Christopher Painter, a former American cyber diplomat who is now the president of the Global Forum on Cyber ​​Expert, noted that after SolarWinds' attack, Biden said that cyber security was at the highest level of government as soon as his administration entered office Will give priority. . Biden suggested harsher penalties and fines for those who carried out the cyber attack.

In contrast, Painter highlighted how Trump allegedly told a cyber security adviser that he was not watching the Masters golf tournament and sacked administration officials who blamed Russia's cyber attack, including SolarWinds Was held.

Painter was a coordinator for cyber issues at the State Department since 2011. He helped negotiate joint agreements with other countries on issues such as protecting critical infrastructure and developing cyber norms until downgrading the Trump administration's office in 2017.

Oddly (or depending on your position) in the dying days of the Trump administration, Secretary of State Mike Pompeo created a new Cyber ​​Security and Emerging Technology (CSET) bureau within his department, bringing cyber importance back to the state Is putting Painter called the Late Move "bizarre".

Painter also noted that as part of his promise to raise Cybercity's profile, Biden revived the position of cyber coordinator in the White House. He will also have another new post, a Deputy National Cyber ​​Security Advisor. In addition, the Congress recently mandated the creation of a new post of National Cyber ​​Director.

As part of Biden's proposed US $ 1.9 trillion economic recovery plan released last week, the Cyber ​​Security and Information Security Agency (CISA) and the General Services Administration and major new IT and cyber security shared services programs to complete major modernization projects There is $ 9 billion to start. In federal agencies. It includes $ 200 million for the rapid recruitment of hundreds of experts to support the federal chief information security officer and the American digital service.

On international issues such as Internet governance and cyber norms of behavior, Iles says he believes Painter hopes to work closely with allies in several forums, including the United Nations, the European Union and NATO.

“One thing that complicated my old office efforts, even though people (in other countries) would work with us on cyber issues, we were urinating a lot of our colleagues on other issues. That does not help if we are trying to form alliances on shared threats on every issue and helps on cyber, it is in a better posture.

But, painters are adamant that the country "has to think about how to hold bad actors accountable." That is