UNCLASSIFIED

UNCLASSIFIED

1

National Security in Cyberspace:It Takes a Nation

Sandra Stanar-Johnson

NSA/CSS Representative to the Department of Homeland Security

February 2010

UNCLASSIFIED

UNCLASSIFIED

2

UNCLASSIFIED

UNCLASSIFIED

3

It Takes A Nation

.mil

.gov

CriticalInfrastructure

.com

UNCLASSIFIEU

UNCLASSIFIED 3

UNCLASSIFIED

UNCLASSIFIED

4

SHARING

THE SAME

NETWORK

UNCLASSIFIED

UNCLASSIFIED

5

The Threat is Real

…The threat is growing!

The cyber threat is real & multidimensional,running the gamut:

• Classic insider threat• Close/expanded access• Remote (network) access • Exploitation of the vendor/supply chain

UNCLASSIFIED

UNCLASSIFIED

6

Key NSA Roles

• Build and Manage Global Sensor Base– Global reach

• Process and Decrypt Massive and Complex Dataflows– Processing power– Cryptanalysis

• Analyze and Produce Intelligence• Defend Department of Defense Networks and

Support Others in their Responsibilities to do the same– Traditional Information Assurance– Technical expertise

UNCLASSIFIED

UNCLASSIFIED

7

The Global Network

Why is this important? The business of America is business and it is conducted on the Network. This makes the Network a National Interest.This raises the following issues:

• Situational Awareness• Assured Access• Technical Governance• National Oversight• Long Term Strategic Advantage

Operations, organizations, laws and policies have not kept pace with this changing technology

8

Developing a Comprehensive Solution

• Based on a legal framework that simultaneously protects Civil Liberties while ensuring our network security

• Dynamic defense moves us from passive observer to active participant with an “End-to-End” network solution

• Ensures real-time Network Situational Awareness• Connects all the “parts” for real-time Operations

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

9

Defending in Cyberspace

Industry

FBINCIJTF

DHSUS-CERT

Services

Others

ODNIIC-IRC

DISAGNO

Allies

STRATCOM

DoDDC3

NSANTOC

• Integrating offense and defense to build a better defense• Sharing situational awareness across domains

UNCLASSIFIED

UNCLASSIFIED

10

A National Response - CNCI

The Comprehensive National Cybersecurity Initiative (CNCI) is underway to address these challenges by:

• Employing advanced technology• Increasing situational awareness by connecting the

cybersecurity centers of excellence• Developing ability for cyber attack ATTRIBUTION

through exploratory research and development• Increasing core foreign intelligence collection to

provide indications and warning • Developing framework to create a future environment

that no longer favors cyber intruders over defenders• Protecting privacy and civil liberties

UNCLASSIFIED

UNCLASSIFIED

11

Long-Term Concern

• We will be providing potential adversaries access to our telecommunications networks by buying their products that would then be serviced by those same foreign vendors – Telecom is the crown jewel of our national

security apparatus– Cryptographic and information security products

could be enablers for compromise – The government cannot do risk management with

the current lack of visibility into equipment purchases and service relationships

UNCLASSIFIED

UNCLASSIFIED

12

What We Need From You

• Actively Support • The Enduring Security Framework• The Comprehensive National

Cybersecurity Initiative• Help educate others• Help build the Government - Industry Partnership