Internet Security Alliance News & Information Security Resources

 

From The Internet Security Alliance

In The News…

July 24, Orange County Register – (California) FBI to investigate Placentia library hacking. The FBI is hunting down the hackers that hijacked the Placentia Public Library Web site the morning of July 24, a bureau official said the same afternoon. “The FBI will open and investigation into this incident,” said an FBI spokeswoman. The spokeswoman, who works out of the bureau’s Los Angeles field office, said that the FBI has a special unit that investigates “cyber crimes, computer intrusions, defacements, more traditional crimes like fraud and child exploitation.” Visitors to the Placentia Library Web site were greeted by an image of a flapping flag with a crescent moon and star behind a portrait of famed Turkish leader Mustafa Kemal Ataturk. Underneath was the phrase “Editaarruz is back.” A group calling itself the “Federal Attack Team” has apparently hacked www.placentialibrary.org — disabling the site completely. The word “taarruz” means “attack” or “offensive” in the Turkish language.
Source: http://www.ocregister.com/articles/site-web-search-2506225-google-placentia

Internet Security Alliance News 7-29-09 : Information Security Resources

Technorati Tags: 2009,access,Anthony M. Freed,Apple,audits,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,cyber security,cybersecurity,cybersquatting,D and O liability,Data,DDoS,defense industrial base,DHS,DIB,DMCA,docs,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,governance,Government,hackers,Host,ICANN,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,ISA,ISR,Kevin M. Nixon,law,lawyer,legal,liability,malware,management,News,phishers,privacy rights,protocol,regulations,regulatory,risk,Security,software,spammers,System,systems,third party,valuation,vendors,zero day attack

del.icio.us Tags: 2009,access,Anthony M. Freed,Apple,audits,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,cyber security,cybersecurity,cybersquatting,D and O liability,Data,DDoS,defense industrial base,DHS,DIB,DMCA,docs,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,governance,Government,hackers,Host,ICANN,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,ISA,ISR,Kevin M. Nixon,law,lawyer,legal,liability,malware,management,News,phishers,privacy rights,protocol,regulations,regulatory,risk,Security,software,spammers,System,systems,third party,valuation,vendors,zero day attack

IceRocket Tags: 2009,access,Anthony M. Freed,Apple,audits,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,cyber security,cybersecurity,cybersquatting,D and O liability,Data,DDoS,defense industrial base,DHS,DIB,DMCA,docs,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,governance,Government,hackers,Host,ICANN,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,ISA,ISR,Kevin M. Nixon,law,lawyer,legal,liability,malware,management,News,phishers,privacy rights,protocol,regulations,regulatory,risk,Security,software,spammers,System,systems,third party,valuation,vendors,zero day attack

BuzzNet Tags: 2009,access,Anthony M. Freed,Apple,audits,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,cyber security,cybersecurity,cybersquatting,D and O liability,Data,DDoS,defense industrial base,DHS,DIB,DMCA,docs,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,governance,Government,hackers,Host,ICANN,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,ISA,ISR,Kevin M. Nixon,law,lawyer,legal,liability,malware,management,News,phishers,privacy rights,protocol,regulations,regulatory,risk,Security,software,spammers,System,systems,third party,valuation,vendors,zero day attack

Guide to Global Leadership: Two Recommended “Must Reads” for Corporate Executives

By Kevin M. Nixon, MSA, CISSP^©, CISM^©, CGEIT^©

“The Age of the Unthinkable” by Joshua Cooper Ramo

Do not pass Go! Do not collect $200!  Go directly online and buy “The Age of the Unthinkable” by Joshua Cooper Ramo.  I have been telling everyone I know about this book and now I am writing about it too.

We can all agree, that each day we hear yet another discouraging news report on how something else unexpected has gone to hell in a hand-basket.  Just this past November 2008, Alan Greenspan in testimony before Congress said “I’ve discovered a flaw.”  The Congressman questioning Mr. Greenspan asked him to explain, and with much bewilderment Mr. Greenspan said that “using the vast knowledge he had accumulated of the last 40 years and on which he had based his most trusted decisions, was no longer valid.” 

Hearing that from Alan Greenspan must have had the same impact as someone overhearing Warren Buffet say “oops, I only wanted to buy 10% of that company and I accidentally added an extra zero.  Now I own 100%.  Can I change that order?”

Here is some background on the author: 

Joshua Cooper Ramo is the managing director at Kissinger Associates, one of the world’s leading geostrategic advisory firms and the former foreign editor and assistant managing editor of Time magazine.

Mr. Ramo has recently released an audio book entitled “The Age of the Unthinkable – Why the new world disorder constantly surprises us and what we can do about it”

Here is a brief section of the book’s introduction:

“Just a few years into a new century, we’ve arrived at a moment of peril that not long ago would have seemed unimaginable.  All around us, the ideas and institutions that we once relied on for our safety and security are failing, and the best ideas of our leaders seem to make our problems worse, not better.  A global war on terror produces,  in the end, more dangerous terrorists.  The fight to stop financial crisis seems to accelerate its arrival.  Carefully negotiated  peace plans produce less peace.

This wasn’t always the case.  For decades, our engagement with the world was based on the seductive belief that there was a logical relationship between the power of states and the physics of change.  But that traditional physics of power has been replaced by something radically different.  Drawing upon history, economics, complexity theory, psychology, human immunology, and the science of networks we learn about a landscape of inherent unpredictability and remarkable possibility.”

"ALL I REALLY NEED TO KNOW I LEARNED IN KINDERGARTEN" by Robert Fulghum

Most of what we really need to know about how to live, and what to do, and how to be, we learned in kindergarten. Wisdom was not at the top of the graduate school mountain, but there in the sand box at nursery school.

These are the things we learned.

• Share everything.
• Play fair.
• Don't hit people.
• Put things back where you found them.
• Clean up your own mess.
• Don't take things that aren't yours.
• Say you are sorry when you hurt somebody.
• Wash your hands before you eat.
• Flush.
• Warm cookies and cold milk are good for you.
• Live a balanced life.
• Learn some and think some and draw some and paint and sing and dance and play and work everyday.
• Take a nap every afternoon.
• When you go out in the world, watch for traffic, hold hands, and stick together.
• Be aware of wonder.
• Remember the little seed in the plastic cup? The roots go down and the plant goes up and nobody really knows how or why. We are like that.

And then remember that book about Dick and Jane and the first word you learned, the biggest word of all: LOOK! Everything you need to know is there somewhere. The Golden Rule and love and basic sanitation, ecology, and politics and the sane living.

Think of what a better world it would be if we all, the whole world, had cookies and milk about 3 o'clock every afternoon and then lay down with our blankets for a nap. Or we had a basic policy in our nation and other nations to always put things back where we found them and clean up our own messes. And it is still true, no matter how old you are, when you go out in the world, it is best to hold hands and stick together.

Kevin M. Nixon, MSA, CISSP®, CISM®, CGEIT®, has testified as an expert witness before the Congressional High Tech Task Force, the Chairman of the Senate Armed Services Committee, and the Chairman of the House Ways and Means Committee. He has also served on infrastructure security boards and committees including the Disaster Recovery Workgroup for the Office of Homeland Security, and as a consultant to the Federal Trade Commission.

The Author gives permission to link, post, distribute, or reference the above article for any lawful purpose, provided attribution is made to the author and to Information-Security-Resources.com

IceRocket Tags: 2009,access,Kevin M Nixon,Anthony M Freed,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,criminal,cyber security,cyber-crime,cybersecurity,D and O liability,Data,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,Gene Kim,governance,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,Intrusion Detection Engines,ISR,Kevin M. Nixon,Laura Wilson,law,legal,liability,mandates,national security,News,outsourcing,privacy rights,protocol,regulations,regulatory,risk,Sarbanes-Oxley,Security,SOX,statutes,System,systems,third party,Tripwire,valuation,vendors,zero day attack

Technorati Tags: 2009,access,Kevin M Nixon,Anthony M Freed,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,criminal,cyber security,cyber-crime,cybersecurity,D and O liability,Data,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,Gene Kim,governance,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,Intrusion Detection Engines,ISR,Kevin M. Nixon,Laura Wilson,law,legal,liability,mandates,national security,News,outsourcing,privacy rights,protocol,regulations,regulatory,risk,Sarbanes-Oxley,Security,SOX,statutes,System,systems,third party,Tripwire,valuation,vendors,zero day attack

del.icio.us Tags: 2009,access,Kevin M Nixon,Anthony M Freed,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,criminal,cyber security,cyber-crime,cybersecurity,D and O liability,Data,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,Gene Kim,governance,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,Intrusion Detection Engines,ISR,Kevin M. Nixon,Laura Wilson,law,legal,liability,mandates,national security,News,outsourcing,privacy rights,protocol,regulations,regulatory,risk,Sarbanes-Oxley,Security,SOX,statutes,System,systems,third party,Tripwire,valuation,vendors,zero day attack

BuzzNet Tags: 2009,access,Kevin M Nixon,Anthony M Freed,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,criminal,cyber security,cyber-crime,cybersecurity,D and O liability,Data,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,Gene Kim,governance,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,Intrusion Detection Engines,ISR,Kevin M. Nixon,Laura Wilson,law,legal,liability,mandates,national security,News,outsourcing,privacy rights,protocol,regulations,regulatory,risk,Sarbanes-Oxley,Security,SOX,statutes,System,systems,third party,Tripwire,valuation,vendors,zero day attack

Speculation, Rumors and Whispers - Who could become the Cyber Tsar – Will Willie Win?

By Kevin M. Nixon, MSA, CISSP^©, CISM^©, CGEIT^©

Got to thinking about all of the speculation, rumors and whispers, circulating around Washington DC tonight about who is on the short list with Tsar-like skills.   

First, disregard all of the qualifications, in-depth security knowledge etc. that are on the typical everyday run of the mill Tsar Job Postings.

Think about alternative candidates that have additional supplemental income to take the sting out of that capitated $150K pay grade.  Perhaps someone retired from the military, perhaps someone who has retained top level security clearance while in the private sector.  Perhaps someone with experience dealing with huge software suppliers and with experience in Government Relations and Federal Programs with companies located in Washington State.  And certainly someone with former responsibility for sales, business development, and the capture/proposal process for public sector opportunities.  Consider also, someone with experience developing a company's Network Centric Systems, for Military Integration and Transformation.  After all of those additional qualifications, perhaps someone currently in the private sector with very close government ties.  

Rear Admiral Robert C. “Willie” Williamson, USN (Ret) joined Raytheon, Network Centric Systems in March 2004. He assumed the newly created position of Director, Naval Integration and Transformation and was assigned additional responsibilities as the Director of Business Development for Integrated Communications Systems (ICS) in December 2004. Currently, Willie is the vice president of International Programs for Integrated Communications Systems (ICS).

Another Washington whisper includes Paul B. Kurtz, a recognized cyber security and homeland security expert. He served in senior positions on the White House's National Security and Homeland Security Councils under Presidents Clinton and Bush and is currently an on-air consultant to CBS News.   Paul Kurtz, is currently a Partner and security consultant with Arlington, Va.-based Good Harbor Consulting.  

Good Harbor Consulting Good Harbor Consulting, LLC was founded in 2002 by Good Harbor President Roger W. Cressey after he served in cyber security and counterterrorism positions in the Clinton and Bush administrations. He sought to establish a boutique consulting firm combining public and private sector knowledge and experience to develop a unique offering for government and commercial clients.

In 2003, Richard A. Clarke joined as Chairman of the firm and John S. Tritak joined as CEO. Clarke, an internationally recognized expert on security, including homeland security, national security, cyber security, and counterterrorism, has served the last three U.S. Presidents as a senior White House advisor. Prior to his 11 consecutive White House years, Clarke served for 19 years in the Pentagon, the Intelligence Community, and State Department.

So, President Obama has a number of players sitting on the bench and ready to play the game.  But something just keeps nagging me as I tried to figure out who might have the best odds in Vegas.  Add all of those ingredients together, stir and filtered and studied and still came up with Retired U.S. Navy Rear Admiral Robert C. "Willie" Williamson. 

Just as I had noticed the mysterious change in Melissa Hathaway’s title on the White House Blog, at the moment that the President was speaking, I also noticed something very interesting, “Why would Raytheon remove Rear Admiral Williamson’s distinguished service Bio from the corporate website?”  Will Raytheon be doing an executive search for a new VP of International Programs?  (Just imagine job search skills would include:  “Successful candidate should possess Tsar like qualities and drive for advancement.)

It just seems to me that if one studies the subtle, nuance moves which Washington perfected and patented it would seems that Willie is the pick.  That is just my personal opinion and random thinking.

IceRocket Tags: 2009,DHS,Economy,Government,hackers,Hathaway,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,ISR,"Kevin M Nixon",Larry Carter,law,legal,liability,malware,management,Melissa Hathaway,misuse,national security,Obama,outsourcing,press release,privacy rights,protocol,regulations,regulatory,risk,Security,Senate,software,White House,zero day attack

Technorati Tags: 2009,DHS,Economy,Government,hackers,Hathaway,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,ISR,"Kevin M Nixon",Larry Carter,law,legal,liability,malware,management,Melissa Hathaway,misuse,national security,Obama,outsourcing,press release,privacy rights,protocol,regulations,regulatory,risk,Security,Senate,software,White House,zero day attack

LiveJournal Tags: 2009,DHS,Economy,Government,hackers,Hathaway,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,ISR,"Kevin M Nixon",Larry Carter,law,legal,liability,malware,management,Melissa Hathaway,misuse,national security,Obama,outsourcing,press release,privacy rights,protocol,regulations,regulatory,risk,Security,Senate,software,White House,zero day attack

del.icio.us Tags: 2009,DHS,Economy,Government,hackers,Hathaway,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,ISR,"Kevin M Nixon",Larry Carter,law,legal,liability,malware,management,Melissa Hathaway,misuse,national security,Obama,outsourcing,press release,privacy rights,protocol,regulations,regulatory,risk,Security,Senate,software,White House,zero day attack

43 Things Tags: 2009,DHS,Economy,Government,hackers,Hathaway,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,ISR,"Kevin M Nixon",Larry Carter,law,legal,liability,malware,management,Melissa Hathaway,misuse,national security,Obama,outsourcing,press release,privacy rights,protocol,regulations,regulatory,risk,Security,Senate,software,White House,zero day attack

BuzzNet Tags: 2009,DHS,Economy,Government,hackers,Hathaway,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,ISR,"Kevin M Nixon",Larry Carter,law,legal,liability,malware,management,Melissa Hathaway,misuse,national security,Obama,outsourcing,press release,privacy rights,protocol,regulations,regulatory,risk,Security,Senate,software,White House,zero day attack

Washington is Whispering

Speculation, Rumors and Whispers - Who could become the Cyber Tsar

Got to thinking about all of the speculation, rumors and whispers, circulating around Washington DC tonight about who is on the short list with Tsar-like skills.   

First, disregard all of the qualifications, in-depth security knowledge etc. that are on the typical everyday run of the mill Tsar Job Postings.

Think about alternative candidates that have additional supplemental income to take the sting out of that capitated $150K pay grade.  Perhaps someone retired from the military, perhaps someone who has retained top level security clearance while in the private sector.  Perhaps someone with experience dealing with huge software suppliers and with experience in Government Relations and Federal

Programs with companies located in Washington State.  And certainly someone with former responsibility for sales, business development, and the capture/proposal process for public sector opportunities.  Consider also, someone with experience developing a company's Network Centric Systems, for Military Integration and Transformation.  After all of those additional qualifications, perhaps someone currently in the private sector with very close government ties.  

Add all of those ingredients together, stir and filter.  One name comes to pops to the top of the list.  Wonder if Retired U.S. Navy Rear Admiral Robert C. "Willie" Williamson is considering his time with Raytheon might be limited.  That is just my personal opinion and random thinking.

 

Technorati Tags: 2009,access,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,criminal,cyber security,cyber-crime,cybersecurity,D and O liability,Data,DHS,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,governance,Government,hackers,Hathaway 60-Day Report,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,Intrusion Detection Engines,ISR,Kevin M. Nixon,Larry Carter,law,legal,liability,malware,management,Melissa Hathaway,misuse,national security,News,NSC,Obama,outsourcing,press release,privacy rights,protocol,regulations,regulatory,risk,Security,Security Our Digital Future,Senate,software,System,systems,testimony,third party,USSS,v,valuation,vendors,White House,zero day attack

del.icio.us Tags: 2009,access,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,criminal,cyber security,cyber-crime,cybersecurity,D and O liability,Data,DHS,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,governance,Government,hackers,Hathaway 60-Day Report,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,Intrusion Detection Engines,ISR,Kevin M. Nixon,Larry Carter,law,legal,liability,malware,management,Melissa Hathaway,misuse,national security,News,NSC,Obama,outsourcing,press release,privacy rights,protocol,regulations,regulatory,risk,Security,Security Our Digital Future,Senate,software,System,systems,testimony,third party,USSS,v,valuation,vendors,White House,zero day attack

IceRocket Tags: 2009,access,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,criminal,cyber security,cyber-crime,cybersecurity,D and O liability,Data,DHS,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,governance,Government,hackers,Hathaway 60-Day Report,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,Intrusion Detection Engines,ISR,Kevin M. Nixon,Larry Carter,law,legal,liability,malware,management,Melissa Hathaway,misuse,national security,News,NSC,Obama,outsourcing,press release,privacy rights,protocol,regulations,regulatory,risk,Security,Security Our Digital Future,Senate,software,System,systems,testimony,third party,USSS,v,valuation,vendors,White House,zero day attack

BuzzNet Tags: 2009,access,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,criminal,cyber security,cyber-crime,cybersecurity,D and O liability,Data,DHS,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,governance,Government,hackers,Hathaway 60-Day Report,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,Intrusion Detection Engines,ISR,Kevin M. Nixon,Larry Carter,law,legal,liability,malware,management,Melissa Hathaway,misuse,national security,News,NSC,Obama,outsourcing,press release,privacy rights,protocol,regulations,regulatory,risk,Security,Security Our Digital Future,Senate,software,System,systems,testimony,third party,USSS,v,valuation,vendors,White House,zero day attack