Challenges in Information Security

1
Challenges in Information Security

• Gregory White, PhD
• Technical Director
• Center for Infrastructure Assurance and Security
• gwhite_at_utsa.edu
• 210-458-6307

2
The Challenge Exists atSeveral Levels

• Protecting the individual computer system.
• Protecting the network.
• Protecting the organization.
• Protecting the sector.
• Protecting the nation.

3
Homeland Security the old
4
Homeland Security today
5
Infrastructure Security Information Assurance

• Security has been, and continues to be, a major
  issue with our networks.
• Security research has been conducted for several
  decades.
• Despite all of the research conducted, security
  problems still exist.
• One of the reasons for this is that, no matter
  how advanced a security technology is, ultimately
  people/users are going to get involved.

6
The Real Issue(s)

• How do you do security?
• How can the community do security?
• How do you justify the cost of doing security?

7
An Operational Issue

• Security is not just a technological problem, it
  is an Operational Problem.
• The Operational Model of Computer Security

Protection Prevention
(Detection
Response)

• Security tools can provide visibility into and
  control of operational networks.

8
So, whats the answer?

• What is the threat to your organization?
• Technology is needed, it is not the only answer,
  however.
• Consider security in your own operational
  environment.
• How do you interact with
• Other parts of your own organization
• Other organizations in your own sector, in
  others.
• The government
• Training is essential at all levels in the
  organization.