What could the Obama administration do to help your company with cybersecurity?

By | July 16, 2010, 7:38am PDT

Summary: Ronald Reagan famously said, “The nine most terrifying words in the English language are, ‘I’m from the government and I’m here to help.’”

Ronald Reagan famously said, “The nine most terrifying words in the English language are, ‘I’m from the government and I’m here to help.’”

The Obama administration is reportedly looking at the economic component of cybersecurity.

In a meeting on July 12, White House Cyber-Security Coordinator Howard Schmidt met with Secretary of Commerce Gary Locke and Department of Homeland Security Secretary Janet Napolitano explored the economic side of online security.

The premise is simple. If the economics favor the attacker (and the ROI for a cyberattack can be enormous), what can the U.S. Government do to level the playing field?

Of course, the solution isn’t nearly as simple. It’s possible to run a botnet, for example, using a single cheap PC. But it’s virtually impossible to defend against a determined DDoS attack without both a lot of effort and a lot of expense.

It appears the administration is looking at how to economically encourage companies to invest more into online defense.

But the obvious question is what does that mean? Does that mean tax incentives for buying or spending on cybersecurity? What sort of impact will that really have?

It is an interesting question. Many companies avoid investing much in cybersecurity because their management doesn’t perceive the expense as contributing to the bottom line. As most readers here on ZDNet know, recovering from a cyberattack can be quite costly and it is important to have good defensive measures in place.

If the government implements tax incentives, is this a nod to commercial providers, and where does that leave open source projects?

So, dear readers, I have a small challenge for you. You guys are experts on the topic of IT operations. If the government were to provide help or incentives to defend against cyberattacks, what sort of help or incentives would actually be useful and improve security?

Go ahead and TalkBack below. This is an interesting and important topic, and so it merits considered responses. Let’s make this a constructive discussion.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

David Gewirtz, Distinguished Lecturer at CBS Interactive, is an author, U.S. policy advisor, and computer scientist. He is featured in The History Channel special The President's Book of Secrets.

Disclosure

David Gewirtz

At various times during his adult life, David has voted for both Democrats and Republicans, and has been disappointed by both. He is deeply disturbed by how partisanship has come before patriotism in America, which gives him the freedom to pick on both sides.

David is a frequent guest on TV and radio stations across America and can usually be heard or seen on-the-air at least once a week. He writes weekly commentary and analysis for CNN’s Anderson Cooper 360 and has been interviewed by Fox News, CNN, various ABC and NBC affiliates, and Canada’s Global TV. He has been a featured guest on National Public Radio and has also been featured on Voice of America, Radio Free Europe, and Radio Liberty where his commentaries on technology, industry, and emerging nations have been broadcast into 46 countries (all in their own unique translations).

David is the executive director of U.S. Strategic Perspective Institute, a nonprofit research and policy organization. He is the Cyberterrorism Advisor for the International Association for Counterterrorism & Security Professionals, a columnist for The Journal of Counterterrorism and Homeland Security and a special contributor to Frontline Security Magazine. He is a member of the FBI’s InfraGard program, the security partnership between the FBI and industry. David is also a member of the U.S. Naval Institute and the National Defense Industrial Association, the leading defense industry association promoting national security.

David is an advisory board member for the Technical Communications and Management Certificate program at the University of California, Berkeley extension. He is also a member of the instructional faculty at the University of California, Berkeley extension.

David’s “day job” is as publisher and editor-in-chief of ZATZ publishing, an online publisher of technical magazines. Other than than his ownership stake in Component Enterprises, Inc. (the parent company of ZATZ), David has no additional industry investments.

ZATZ has many advertisers who do, in part, provide for David’s lush income and extravagant lifestyle. Most of them are IBM and Lotus aftermarket suppliers, some of them make goodies for Microsoft Outlook, and a few make all sorts of strange mobile devices and add-on products. David has been a regular judge of the IBM Awards, but has no formal financial interest in or with IBM.

Because the ZATZ online magazines often review products, David and ZATZ are sent an overwhelming stream of unsolicited, silly, and often useless products to review. Because they’re such a pain to track and ship back, these products often wind up in a dumpster or fill up the corner of a large closet. Although David has no plans to review products in connection to his ZDNet blog, if he does do a product review, he will disclose any relationship completely in that posting.

Both through ZATZ and independently, David derives a small income through various advertising and sales relationships with Amazon.com and Google. These are minor relationships and they will not impede his willingness or ability to chastise either company should they deserve it.

David has many other business relationships, but none of them relate to anything he covers in his ZDNet blog. David does have a bit of the sales-guy bug and if he’s not doing a sales deal with someone at least once a month, he goes through withdrawal. He has a number of consulting clients, but none of them relate to anything he covers for ZDNet (and if they ever do, he will either disclose that fact, or decline to write about them).

Back in the 1980s, David held the unusual title of “Godfather” at Apple. He has written and published 40 incredibly simplistic applications for Apple’s iPhone.

Although David is forbidden to disclose the terms of his iPhone developer agreement, he isn’t drinking the Apple Kool Aid, will never be confused with a metrosexual, and feels free to mock Apple, and Apple users, any time the occasion permits, on alternate Tuesdays, or if he’s bored.

Biography

David Gewirtz

In addition to hosting the ZDNet Government and ZDNet DIY-IT blogs, CBS Interactive's Distinguished Lecturer David Gewirtz is an author, U.S. policy advisor, and computer scientist. He is featured in The History Channel special The President's Book of Secrets, is one of America's foremost cyber-security experts, and is a top expert on saving and creating jobs. He is also director of the U.S. Strategic Perspective Institute as well as the founder of ZATZ Publishing.

David is a member of FBI InfraGard, the Cyberwarfare Advisor for the International Association for Counterterrorism & Security Professionals, a columnist for The Journal of Counterterrorism and Homeland Security, and has been a regular CNN contributor, and a guest commentator for the Nieman Watchdog of the Nieman Foundation for Journalism at Harvard University. He is the author of Where Have All the Emails Gone?, the definitive study of email in the White House, as well as How To Save Jobs and The Flexible Enterprise, the classic book that served as a foundation for today's agile business movement.

Related Discussions on TechRepublic

Did you know you can take part in these discussions with your ZDNet membership?
45
Comments

Join the conversation!

Just In

RE: What could the Obama administration do to help your company with cybersecurity?
Norm Cimon Updated - 21st Jul 2010
@NICKCO18
You've got be kidding, right? BP just blew out 100+ million gallons of oil all over the Gulf Coast. The idea that big business is a paradigm of intelligence or competence is an absurd proposition. That's been made abundantly clear. Their CEO is a fool who put his foot so deep into his mouth he's going to need stomach surgery. This is the head of a multi-hundred-billion dollar company? This is who we should turn over the keys to the kingdom to?

The bribery that characterized oil-company interactions with the MMS is a gift from the previous administration. This one should have taken that agency apart limb-by-limb and put real regulators in there, not the lackeys and idiots who've been staffing so many of these agencies. Pardon me that would require 60 votes wouldn't it? That sort of "democracy" isn't happening these days. I forgot.

The oil men who were running the show did the same thing for their "bidness" that the "smartest guys in the room", the stiffs at the Federal Reserve, did for Wall Street, pave the way for complete de-regulation - no guidelines, no oversight, and a bunch of hacks overseeing them, hacks who all had their roots in "business".

The orgy of de-regulation didn't start with them. It's a remnant of the same administration that gave us Donald Regan. In his role as Treasury Secretary that "businessman" slid over from Wall Street for one reason alone: to get the ball rolling on complete de-regulation of financial "innovation". That's a Rube Goldberg contraption, filled with CDOs, default swaps, and other endless arcane computer-created chaos, none of which the suits had a handle on in the end. It simply overwhelmed the "smartest guys in the room".

Just as oil de-regulation has wiped out families and jobs on the Gulf Coast, 8 million+ jobs have been blown out of the water by Wall street.

There will be endless long term repercussions, economic, psychological, physical violence, drug abuse, you name it it's already emerging. Who do you think will pay for that? Goldman Sachs? BP? It's you and me, thanks to our collective unwillingness to bring the foolish, incompetent, unprofessional, bloated "big" businessmen to heel years ago.

Get lost.
0 Votes
+ -
One word: NOTHING
wackoae 16th Jul 2010
Your company, your responsibility. Tax payer money should not be used to fix incompetence and irresponsibility of the private industry.

It is bad enough that the debt was QUADRUPLED to bail out incompetent CEOs and scammers (GM & banks), we now have IDIOTS asking the government to pay for the security of private networks.

Want cyber-security?? Pay for it yourself. O better yet, send somebody to training and learn how to do the work using open source tools.
@wackoae Tax incentives for companies who improve security of customer information MIGHT be in order if the government stays out of the business. Help in avoiding or recovering from a denial of service attack should be out of the question. If a company looses money because they have not protected themselves it is their own problem. If their customers (the tax payers) are compromised because of the company's lax security it is a problem for all of us. At the least a company should not only be required to "make good" any losses the customer suffers but to pay a fine for their careless disregard for the safety of the customers information.
0 Votes
+ -
Stay away
NICKCO18 16th Jul 2010
Anything the govrnment touches it screws up.
The government should stay the hell out of private business.
@NICKCO18
You've got be kidding, right? BP just blew out 100+ million gallons of oil all over the Gulf Coast. The idea that big business is a paradigm of intelligence or competence is an absurd proposition. That's been made abundantly clear. Their CEO is a fool who put his foot so deep into his mouth he's going to need stomach surgery. This is the head of a multi-hundred-billion dollar company? This is who we should turn over the keys to the kingdom to?

The bribery that characterized oil-company interactions with the MMS is a gift from the previous administration. This one should have taken that agency apart limb-by-limb and put real regulators in there, not the lackeys and idiots who've been staffing so many of these agencies. Pardon me that would require 60 votes wouldn't it? That sort of "democracy" isn't happening these days. I forgot.

The oil men who were running the show did the same thing for their "bidness" that the "smartest guys in the room", the stiffs at the Federal Reserve, did for Wall Street, pave the way for complete de-regulation - no guidelines, no oversight, and a bunch of hacks overseeing them, hacks who all had their roots in "business".

The orgy of de-regulation didn't start with them. It's a remnant of the same administration that gave us Donald Regan. In his role as Treasury Secretary that "businessman" slid over from Wall Street for one reason alone: to get the ball rolling on complete de-regulation of financial "innovation". That's a Rube Goldberg contraption, filled with CDOs, default swaps, and other endless arcane computer-created chaos, none of which the suits had a handle on in the end. It simply overwhelmed the "smartest guys in the room".

Just as oil de-regulation has wiped out families and jobs on the Gulf Coast, 8 million+ jobs have been blown out of the water by Wall street.

There will be endless long term repercussions, economic, psychological, physical violence, drug abuse, you name it it's already emerging. Who do you think will pay for that? Goldman Sachs? BP? It's you and me, thanks to our collective unwillingness to bring the foolish, incompetent, unprofessional, bloated "big" businessmen to heel years ago.

Get lost.
0 Votes
+ -
How about...
itpro_z 16th Jul 2010
...adopting policies of fiscal responsibility, repealing the massive government takeover of our health care, and lowering taxes? Most of us are more than aware of cybersecurity, but if we are driven out of business by the financial idiocracy that has dominated Washington for these last few decades it really won't matter what steps we take.

Likewise, even if the new Cyber-Security Coordinator actually knows what he is doing (which I highly doubt), it won't amount to a hill of beans if the government spends itself into financial collapse. Forgive my pessimism, but this strikes me as arguing about what music the band should be playing while the Titanic slips to its watery grave.

Besides, the last thing most of us want is for the government to have yet another excuse to meddle in our affairs. I am not a big fan of Ronald Reagan, but his message in your quote was spot on.
0 Votes
+ -
There is always a balance
Webbywarehouse 16th Jul 2010
As in IT, an increase in security can appear to result in a lowering of usability (not exactly but many see it as such).

Likewise, the more government we have, regardless of where, it seems we have less freedom.

Would anyone argue that if the government takes more money from you in taxes that you have less freedom?

Would anyone argue that more regulation in any form may potentially take away some or much freedom?

Of course we all must give a little, such as with our neighbors not being able to dump oil in their backyard, or leave pallets of dead car batteries next to a park.

But we must be willing to accept less freedom for the added benefit of something...but is that something though and what do we give up?
0 Votes
+ -
Nothing
aep528 16th Jul 2010
1. The government does nothing for physical security in most industries; they should not get involved in "online" security either.
2. Doesn't most real corporate damage come from insiders? How will improving external defenses help?
The best thing they could do is stay completely away from it. Centralizing solutions also centralizes failures. Diversity is the best protection.
0 Votes
+ -
WATCH OUT...MORE TAXES.
rubenthevp Updated - 16th Jul 2010
I think it's always important to consider who would profit from legislation of any kind. If the govt is smart, it should let economies of scale take over, befriend the private sector, and let the experts do their thing. Bigger govt is bad for the American people. Real jobs are created in the private sector. So help the private sector grow.
They should order the InZerosystems security devices and as the volume goes up, the prices should fall, and then, soho and home-users can afford to buy them... The ONLY TOTAL security in the industry, absolutely! Certified!
0 Votes
+ -
Soliciting votes
klumper 16th Jul 2010
Implement and enforce xxx domain zone for porn smutmeisters.

Hang a few spammers to set an example (then a few more for good measure, then say, a dozen more just cuz).

Ditto re organized netcrime rings (any found on cooperative shores). Budget for 100 ropes at the outset.

Lay off (permanently) 50% of the federal work force, no ifs, ands or butts. Start the mandate with the Immigration Department (90% reduction). Provision to lay off 25% more feds within the following 3 years if the surviving gaggle refuse to pick up the slack and cover the resultant deficit.

Give each law-abiding, non-alien American Joe a record breaking, mother-of-all TAX REBATE CHECK from the resultant savings!

Declare DAY OF RELIEF national holiday to get drunk and celebrate your newfound good fortune.

Hire me as Yankee Crime Czar and all-purpose Bad Boy to put the wheels in motion.
0 Votes
+ -
wow...you should be in politics.
SonofaSailor 16th Jul 2010
@klumper

you've got a future!
0 Votes
+ -
One vote's a start
klumper Updated - 16th Jul 2010
@SonofaSailor

But one nagging question remains: Am I PC enough for any P olitical Cretin future?

Note that if I couldn't hang the miscreants by their scrawny necks, I'd settle for their thumbs (in the name of PC "compassion"). Keyboard c&c'ers no more!

Everything on the feds stands though. You have my word. wink

Thanks for your patronage.
@klumper
Now, now, the word "hang" is definitely not PC. happy
Start with physical security, secure our borders!
0 Votes
+ -
@JB Tucson

they can't much damage huh?
0 Votes
+ -
US National Security depends on private sector security
StartUpper Updated - 16th Jul 2010
Some 85% of critical infrastructure in the US is owned and operated by the private sector. Pipelines, power stations, switchboards, medical supply chains...you name it. The US is highly dependent on the internet for normal operations but is astounding insecure to cyber attack. The nation depends on private firms but they are woefully unprepared to defend themselves from logic bombs and other nasty cyber weapons. The Chinese have already been caught planting kill switches at power companies. I resist government intrusion into business with the best of them am not willing to put my family's safety in case of attack in the hands of some gutted IT security budget administrator looking out for his small part of the pie. These private firms must face up to their responsibility and do their part to protect the country. The US government must enable that with a clear plan, standards, and rigorous enforcement. Those advocating a "do nothing" approach do the US a vast disservice and advocate a path that imperils the security of its citizens.
@StartUpper
The problem is the "government" is the biggest slacker in security. When the "government" has employees replying to scams during work hours or using government property for their own personal use it looks like federal administration security should start with the federal administration. If the feds rely on commercial applications for security there should be backed by checks and severe financial fines for slack programming and we know by EULA's that won't happen.
btw, remember, we are the government. We only allow what happens by choice.
What could the Obama administration do to help your company with cybersecurity?!
The Other way Around :
What could Obama administration help our small
Business help USA Gov to work Smarter and more secure with our partners
as that is what our company is aimed for
Sam
ceo/cto Chana Systems
There are things the government can do, things that private industry either can't do or won't do to protect itself. If you find that your home has been burglerized, do you call private industry to report the crime or do you call the police? There are laws that can be used for fraud, theft and malicious activity. Private industry can help by working out security standards and practices, but it would take a government to make those standards enforceable.

It would be nice if the sources of malware could be stopped but this is a stateless activity that crosses international borders. The government can work to find an international agreement to break up the bot nets and aggressively prosecute the script kiddies as well as the other cybercriminals.

Government can act like the 800 pound gorilla and bring havoc into everyone's lives; but that same 800 pound gorilla can also help us in ways that private industry can not. It is the gap between ideals and reality that make cynism of government actions rampant.
@sboverie@...

Not the same thing; I call the police AFTER my home's been burgled. Securing my home FROM burglary is MY affair.
0 Votes
+ -
Too literal
sboverie 16th Jul 2010
@hiraghm@...
I was not trying to be so specific about when you call the police. My point is that government can do more than private industry in some situations. The current meme is that government is evil and needs to be caged. This prevents government from being effective in helping common cause.
sboverie@

No, specific is exactly what is needed. Vigorous prosecution of criminals (cyber or otherwise) are the government's role in this. Otherwise they should be staying out of the way.
If we want to make it far more difficult and expensive for the private sector to beef up their cybersecurity, get the government involved.

If we want to inject racism and properity programs for union members into the cybersecurity issue, get the government involved.

If we want ridiculous, economically unviable, senseless regulations for cybersecurity, get the government involved.

Thanks for asking.
The whole bunch could resign!!
The one and only thing he can do is ask congress to pass a law to make this terrorist activity a death penalty crime. No if ands or buts. We would stop them in their tracks or kill the all off. Either way, Good riddance. That's what he can do!
0 Votes
+ -
Two words...
Reindeer911 16th Jul 2010
HANDS OFF!
0 Votes
+ -
... get out of the military, counter-intelligence, and anti-terrorism business since these are all examples of the Federal government being involved to protect private enterprise from external threats.

Or perhaps they should just privatize these government responsibilities because Haliburton and Blackhawk can do a much better job....
0 Votes
+ -
Good Point
sboverie 19th Jul 2010
@snberk341
Most people have too much trust with private industry to take care of things. Private industry is set up to maximize profits by pushing costs off the company to anywhere they can. There is a role for government that it can do better than private industry or individuals.
The government is getting ready to take over the internet. it already passed powers to the puppet president the criminal barack obama to shut down the internet incase of an attack. This attack will be from them it will be a false flag attack like 911 only it will be a cyber threat.There goal is to shut down free speech and the truth that is leaking out on the internet is killing them so they want to shut it down.
Watch The Obama Deception Movie based on Facts alone of the criminal president barack obama the puppet of the new wolrld order and traitor of Ameria.copy link here.http://www.youtube.com/watch?v=eAaQNACwaLw Also go to Infowars.com to get your news you will not get the real news on tv all you get is fluf peices on people like lindsay lohan and tigerwoods. then lies when it comes to anything else and worse a total complete media black out which is every day.
michelle obama admits her husband born in kenya video clip---http://www.youtube.com/watch?v=proi6NFdKVs
Yeah, ditto what others have said. Keep the jack-booted gov't thugs out of companies' business, whether it's IT, accounting, how many calories the employees eat while on the job, or executive pay. Once "the man" gets his fingers in your company pie, you're at his mercy forever. God help us all, what with the current fascists, communists and socialists admonishing us, among other odious declarations, "at some point, you've earned enough money." You want that kind of intrusion in your company business? The current regime couldn't even manage to "plug the damn hole," much less deal with other complex issues like cyber security. Go ahead, ask for government help. You'll be sorry.
0 Votes
+ -
Resign
MrLucasBrice 17th Jul 2010
En masse.
@MrLucasBrice Bingo!
I have many years invested in government work and contracts. Let them do their work, and we'll do our work. The only thing they could do to "help" and it would likely be very minimal at that, is to make their stuff available for trade/purchase. But now, that wouldn't be too smart, would it?

NEVER INVITE the government into anything unless you can afford it to be screwed up and left to you to straighten out if you live thru it.
@twaynesdomain Aaaaaamennnnnnnnnn!
0 Votes
+ -
Nothing or leave office -
ItsTheBottomLine 18th Jul 2010
And take the pet poodle with him.
Our biggest supporter of the fact that obama was born in kenya and not our president cause you cant be prez if your not born here is his wife michelle obama with her slip of the tounge in this short video.http://www.youtube.com/watch?v=proi6NFdKVs
Our biggest supporter of the fact that obama was born in kenya and not our president cause you cant be prez if your not born here is his wife michelle obama with her slip of the tounge in this short video.http://www.youtube.com/watch?v=proi6NFdKVs
Watch The Obama Deception movie before The Joker [Obama] gets rid of it.http://video.google.com/videoplay?docid=7886780711843120756#
Bush 1 Killed JFK & Bush 2 Killed JFK, Jr - Back to Back movies.---------------------------------------------------------------------------------------------------------------http://dulyconsider.blogspot.com/2007/03/bush-1-killed-jfk-bush-2-killed-jfk-jr.html
What could the Obama administration do? Manage government security. I'll keep my money and manage my own, thank-you! Acorn head ...
0 Votes
+ -
For afforable total sec for everyone
Paul@... 19th Jul 2010
They could purchase the InZerosystems devices in a significant quantity so as to bring the prices down to acceptable numbers for the soho and even for smartphones. It IS the ONLY TOTAL security device available today! see a Brian Livingston article (A Mysterious Solution to your Security) written in 2004 re our device, then called LST. It's taken 7 years and megabucks to get it to a marketable condition. Visit the website and read the news...
They could purchase the InZerosystems devices in a significant quantity so as to bring the prices down to acceptable numbers for the soho and even for smartphones. It IS the ONLY TOTAL security device available today! see a Brian Livingston article (A Mysterious Solution to your Security) written in 2004 re our device, then called LST. It's taken 7 years and megabucks to get it to a marketable condition. Visit the website and read the news...

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix