Cyber security specialists are asking the wrong question when it comes to securing computer networks against external threats, said Richard Bejtlich, chief security officer for private security contractor Mandiant of Alexandria, Va. Testing for network vulnerably gives Air Force cyber officials no idea of the enemy they are up against, said Bejtlich Friday at AFA’s Cyber Futures Conference in National Harbor, Md. Instead, cyber defenders should develop requirements for an “Are you compromised?” assessment to provide real intelligence on the enemy, he suggested. “I think that could be a real game changer, because right now we’re going onto a football field—nobody knows what the score is, we have a sense that we’re getting killed, but the only metrics we have” are on our own defenses and not the forces the enemy is bringing to bear, he explained. “You just paid a lot of money for a test [for which] you know what the answers are going to be,” he added.
F-35As from the Vermont Air National Guard have deployed to Puerto Rico in recent days, continuing a major buildup of U.S. Air Force assets in Latin America aimed at combating drug trafficking and pressuring the regime of Venezuelan leader Nicolas Maduro.
