Black Hat New Dimensions Of Cybersecurity Rod Beckstrom Director [email_address]

Black Hat WIRED New Dimensions Of Cybersecurity Rod Beckstrom Director [email_address]

The Prisoners Dilemma

Insider threats and hackers…

Who reengineered the system?

Back to the Future

The Prisoners Dilemma

The Prisoners Dilemma W/W W/L L/W W/W L/L

Iterated Prisoners Dilemma W/W W/L L/W W/W L/L 200 X

Iterated Prisoners Dilemma W/W W/L L/W W/W L/L 200 X

NCSC ROLES Joint venture of DHS/DNI/DOD/DOJ HSC/NSC Connecting six key network operation centers Information sharing and situational awareness Foster collaboration across Federal government Report on “State of the Network” to White House

Slight problem… What are the rules? What is risk management?

where SC = total security cost SI = security investment L = loss Economics of Security MINIMIZE SC = SI + L

Loss $ Security $ Economics of Security

Loss $ Security $ Economics of Security

Loss $ Security $ Economics of Protocols Better Protocols Drive Loss Function Down

IPV6, BGP, DNS, SMS/IP, POTS … Protocol Investments

Correlation of Losses Correlations of losses due to IP failure ( L IP ) are trending towards 1.0 n

Info Sharing Incentives “ information wants to be free” but Stovepipe perception – “information is power” Incentives against disclosure OSINT/SIGINT/HUMINT Benefits of collaboration and network effect…

Economics of Networks Cyber Diplomacy/Game Theory Cloud Computing Cyber-kinetic Wars Cyber quarantines Secure ISP’s New Dimensions

E Pluribus Unum

How can we best plant our flag in cyberspace? [email_address]