Activity Background

Symantec CTO Mark Bregman Testifies Before U.S. House Science Subcommittee

June 25, 2009 On Thursday, June 25th, 2009, Symantec CTO Mark Bregman appeared before the U.S. House of Representatives’ Subcommitee on Technology and Innovation Committee on Science and Technology’s hearing to assess the cyber security efforts of the Department of Homeland Security (DHS) and the National Institute of Standards and Technology (NIST). The hearing solicited the input of private-sector experts on how federal cyber security activities could enhance the privately-owned segment of the United States’ critica infrastructure; better monitor federal networks; and more clearly define cyber security performance with metrics and success criteria.

In his testimony presented to the subcommittee, Bregman submitted findings from Symantec’s Internet Security Threat Report that underscored the need for greater public/private cooperation to secure the nation’s critical infrastructure.

Specifically, the most common type of attack during the last six months of 2008 targeting the government’s critical infrastructure was denial-of-service attacks, accounting for nearly half of the top ten cyber security threats in 2008.

Bregman also submitted Symantec’s suggestions for the roles that both DHS and NIST can play for securing the nation’s critical infrastructure. Specifically:

• Engage the private sector on a more consistent basis to develop cyber security solutions. Specifically, more input from the private sector could be helpful regarding Project Einstein.
• DHS should formally ask the private sector to participate in DHS’ global supply chain initiative, given that much of the supply chain for cyber security technology exists in the hands of the private sector. Specifically, SAFECODE – a non-profit organization created by and for companies to share software assurance and supply chain best practices – could be leveraged to help the government seeking to defend against threats to the supply chain.
• The U.S. government should engage with the private sector and increase funding on the research and development of science and technology projects that are yet to be deemed commercially viable but still critical to complete gaps in the nation’s critical infrastructure protection.