Open source cloud offers another route to better security, Fearmongers miss the point on mobile security and more

NISTHere are top cyber news and stories of the day.

  • White paper: NIST conducts proof of concept on trusted geolocation in the cloud – A group of NIST scientists working with Intel, VMWare and RSA Archer have created of proof of concept for trusted geolocation in the cloud. This allows managers to locate the exact hardware that is running their cloud services. This is possible using the Intel Trusted Execution Technology. Via FedScoop, more here.
  • Open source cloud offers another route to better security – “IBM’s move to OpenStack is another indication that open cloud offers many advantages when it comes to security.” There are currently over 5,000 IBM private consumers who will be switching to OpenStack in the near future. This will create a huge surge in the open-source cloud market at that time. Via Cloud Pro, more here.
  • Raytheon, Lockheed get U.S. secrets as cybersecurity go-betweens – Raytheon and Lockheed Martin signed on to the DHS Enhanced Cybersecurity Services program, which will provide them with threat signatures obtained by USG sources, free of charge. This will increase the ability of these firms to compete not only in the federal and defense space, but also on the corporate side, as they will have better threat intelligence than many of their competitors. Via Herald Net, more here.
  • In cyberwarfare, rules of engagement still hard to define – As we increase the offensive capabilities of our cyber warriors, we must step back and think, when will we use them, and how. Traditionally, our armed forces follow the “Law of Armed Conflict,” a set of international rules created to govern armed warfare while protecting non-combatants and enemy prisoners of war. But the cyber domain is different, attacks which may affect a key military objective might have incredibly unintended (and devastating) effects on civilian infrastructure. As the consequences of such attacks are unknown (and cannot be completely forecast) we have to take great care in defining our rules of engagement in the cyber domain. Via The Washington Post, more here.
  • Hackers target grocery store card readers – Hackers in Arizona are targeting a grocery chain’s card readers to steal identities. Over 100 victims have been identified in Arizona as targets of identity thieves who stole credit card numbers and made purchases on the east coast, as well as Indonesia and Spain. Via KVOA, more here.
  • DSB task force urges security mandates for DoD cloud computing – “Cloud computing adoption within the Defense Department will require establishment of clear security mandates, says a report from a Defense Science Board task force.” This report points to the DoD CIO and DISA chief using hypervisor attestation, hardware attestation for encryption keys and more. This report also recommends a standardized cloud SLA, and a central repository that documents the cloud transition. Via FierceGovernmentIT, more here.
  • DOD furloughs to begin April 26 – Furloughs for DoD civilians will begin April 26th, barring any major legislative changes. Via FedScoop, more here.
  • Fearmongers miss the point on mobile security – “everyone likes to trumpet the claim that mobile is insecure. Now that people are using their smartphones for work, enterprises are in trouble. The apps that people are using are going to let out all of the confidential data that everyone has been storing for decades…the dirty secret is that mobile has nothing to do with it.” This is an excellent post which investigates how manufacturers are using FUD to sell you on securing your mobile infrastructure, when the real problem is your conventional IT (and its implementation). The author, Brian Katz, makes the point that the real issue is not technology, but our culture of insecurity (and skirting security mandates for ease of use). Via CITE World, more here.

CTOvision Pro Special Technology Assessments

We produce special technology reviews continuously updated for CTOvision Pro members. Categories we cover include:

  • Analytical Tools - With a special focus on technologies that can make dramatic positive improvements for enterprise analysts.
  • Big Data - We cover the technologies that help organizations deal with massive quantities of data.
  • Cloud Computing - We curate information on the technologies enabling enterprise use of the cloud.
  • Communications - Advances in communications are revolutionizing how data gets moved.
  • GreenIT - A great and virtuous reason to modernize!
  • Infrastructure  - Modernizing Infrastructure can have dramatic benefits on functionality while reducing operating costs.
  • Mobile - This revolution is empowering the workforce in ways few of us ever dreamed of.
  • Security  -  There are real needs for enhancements to security systems.
  • Visualization  - Connecting computers with humans.
  • Hot Technologies - Firms we believe warrant special attention.

 

Recent Research

DoD Public And Private Cloud Mandates: And insights from a deployed communications professional on why it matters

Intel CEO Brian Krzanich and Cloudera CSO Mike Olson on Intel and Cloudera’s Technology Collaboration

Watch For More Product Feature Enhancements for Actifio Following $100M Funding Round

Navy Information Dominance Corps: IT still searching for the right governance model

DISA Provides A milCloud Overview: Looks like progress, but watch for two big risks

Innovators, Integrators and Tech Vendors: Here is what the government hopes they will buy from you in 2015

Navy continues to invest in innovation: Review their S&T efforts here

MSPA Unified Certification Standard For Cloud Service Providers: Is This A Commercial Version of FedRamp?

Watch Ben Fry And His Visualizations: Multiple use-cases come to mind, including national security efforts

Agenda And More Details for 4-5 March NIST Data Science Symposium

Actionable Insights From AFCEA Western Conference and Exposition 2014

US Navy’s Engineering Center Provides Deal Winning Info To Industry

solid
About Ryan Kamauff

Ryan Kamauff is a senior analyst with Crucial Point LLC. He produces technology focused content for CTOvision.com and reports on analytical megatrends at the new analysis focused Analyst One.