Government works toward a more proactive cybersecurity approach

Initiatives to detect and respond to cyberattacks are a preliminary step in protecting federal computer networks against hackers and will be followed by efforts to preempt attacks, the Homeland Security Department's cybersecurity chief said on Thursday. The remarks by Gregory Schaffer, appointed assistant secretary of DHS' Office of Cybersecurity and Communications in June, came in response to criticisms that intrusion detection systems such as Einstein 2, deployed early this year, are too reactive. "Einstein 2 really serves to alert the federal government to risks impacting our networks," said Schaffer, during the Homeland Security Symposium and Exposition, hosted by the National Defense Industrial Association. "I'd much prefer we know what's happening in one network within the federal government, secure that and then leverage [the solution] across agencies to prevent it from spreading. And I'd much rather know what was happening in real time, rather than learning at some later point after operations are impacted. Is that as far as we need to go? Absolutely not -- but we need this in incremental steps." Schaffer noted that Einstein 3, which Homeland Security's U.S. Computer Emergency Readiness Team is developing and testing, will "give prevention capabilities that block [attacks] in their tracks before they penetrate the network." The department in July released a classified request for information to identify technologies that can identify possible threats, he said.