Cyber security specialists are asking the wrong question when it comes to securing computer networks against external threats, said Richard Bejtlich, chief security officer for private security contractor Mandiant of Alexandria, Va. Testing for network vulnerably gives Air Force cyber officials no idea of the enemy they are up against, said Bejtlich Friday at AFA’s Cyber Futures Conference in National Harbor, Md. Instead, cyber defenders should develop requirements for an “Are you compromised?” assessment to provide real intelligence on the enemy, he suggested. “I think that could be a real game changer, because right now we’re going onto a football field—nobody knows what the score is, we have a sense that we’re getting killed, but the only metrics we have” are on our own defenses and not the forces the enemy is bringing to bear, he explained. “You just paid a lot of money for a test [for which] you know what the answers are going to be,” he added.
The Space Force should take bold, decisive steps—and soon—to develop the capabilities and architecture needed to support more flexible, dynamic operations in orbit and counter Chinese aggression and technological progress, according to a new report from AFA’s Mitchell Institute for Aerospace Studies.
