National Security in Cyberspace: It Takes a Nation

1. National Security in Cyberspace:It Takes a Nation Sandra Stanar-Johnson NSA/CSS Representative to the Department of Homeland Security February 2010

3. UNCLASSIFIEU It Takes A Nation .mil .gov Critical Infrastructure .com 3 UNCLASSIFIED

4. SHARING THE SAME NETWORK

5. The cyber threat is real & multidimensional,running the gamut: Classic insider threat Close/expanded access Remote (network) access Exploitation of the vendor/supply chain The Threat is Real …The threat is growing!

6. Build and Manage Global Sensor Base Global reach Process and Decrypt Massive and Complex Dataflows Processing power Cryptanalysis Analyze and Produce Intelligence Defend Department of Defense Networks and Support Others in their Responsibilities to do the same Traditional Information Assurance Technical expertise Key NSA Roles

7. The Global Network • Why is this important? The business of America is business and it is conducted on the Network. This makes the Network a National Interest. • This raises the following issues: • Situational Awareness • Assured Access • Technical Governance • National Oversight • Long Term Strategic Advantage Operations, organizations, laws and policies have not kept pace with this changing technology

8. UNCLASSIFIED Developing a Comprehensive Solution • Based on a legal framework that simultaneously protects Civil Liberties while ensuring our network security • Dynamic defense moves us from passive observer to active participant with an “End-to-End” network solution • Ensures real-time Network Situational Awareness • Connects all the “parts” for real-time Operations UNCLASSIFIED

9. Defending in Cyberspace • Integrating offense and defense to build a better defense • Sharing situational awareness across domains Others Industry ODNI IC-IRC FBI NCIJTF Allies DHS US-CERT DoD DC3 DISA GNO STRATCOM Services NSA NTOC

10. The Comprehensive National Cybersecurity Initiative (CNCI) is underway to address these challenges by: Employing advanced technology Increasing situational awareness by connecting the cybersecurity centers of excellence Developing ability for cyber attack ATTRIBUTION through exploratory research and development Increasing core foreign intelligence collection to provide indications and warning Developing framework to create a future environment that no longer favors cyber intruders over defenders Protecting privacy and civil liberties A National Response - CNCI

11. We will be providing potential adversaries access to our telecommunications networks by buying their products that would then be serviced by those same foreign vendors Telecom is the crown jewel of our national security apparatus Cryptographic and information security products could be enablers for compromise The government cannot do risk management with the current lack of visibility into equipment purchases and service relationships Long-Term Concern

12. What We Need From You • Actively Support • The Enduring Security Framework • The Comprehensive National Cybersecurity Initiative • Help educate others • Help build the Government - Industry Partnership