UNCLASSIFIED 1 National Security in Cyberspace: It Takes a Nation Sandra Stanar-Johnson NSA/CSS Representative to the Department of Homeland Security February 2010

UNCLASSIFIED 2

3 It Takes A Nation.mil.gov Critical Infrastructure.com UNCLASSIFIEU UNCLASSIFIED 3

4 SHARING THE SAME NETWORK

UNCLASSIFIED 5 The Threat is Real …The threat is growing! The cyber threat is real & multidimensional, running the gamut: Classic insider threat Close/expanded access Remote (network) access Exploitation of the vendor/supply chain

UNCLASSIFIED 6 Key NSA Roles Build and Manage Global Sensor Base –Global reach Process and Decrypt Massive and Complex Dataflows –Processing power –Cryptanalysis Analyze and Produce Intelligence Defend Department of Defense Networks and Support Others in their Responsibilities to do the same –Traditional Information Assurance –Technical expertise

UNCLASSIFIED 7 The Global Network Why is this important? The business of America is business and it is conducted on the Network. This makes the Network a National Interest. This raises the following issues: Situational Awareness Assured Access Technical Governance National Oversight Long Term Strategic Advantage Operations, organizations, laws and policies have not kept pace with this changing technology

8 Developing a Comprehensive Solution Based on a legal framework that simultaneously protects Civil Liberties while ensuring our network security Dynamic defense moves us from passive observer to active participant with an “End-to- End” network solution Ensures real-time Network Situational Awareness Connects all the “parts” for real-time Operations UNCLASSIFIED

9 Defending in Cyberspace Industry FBI NCIJTF DHS US-CERT Services Others ODNI IC-IRC DISA GNO Allies STRATCOM DoD DC3 NSA NTOC Integrating offense and defense to build a better defense Sharing situational awareness across domains

UNCLASSIFIED 10 A National Response - CNCI The Comprehensive National Cybersecurity Initiative (CNCI) is underway to address these challenges by: Employing advanced technology Increasing situational awareness by connecting the cybersecurity centers of excellence Developing ability for cyber attack ATTRIBUTION through exploratory research and development Increasing core foreign intelligence collection to provide indications and warning Developing framework to create a future environment that no longer favors cyber intruders over defenders Protecting privacy and civil liberties

UNCLASSIFIED 11 Long-Term Concern We will be providing potential adversaries access to our telecommunications networks by buying their products that would then be serviced by those same foreign vendors –Telecom is the crown jewel of our national security apparatus –Cryptographic and information security products could be enablers for compromise –The government cannot do risk management with the current lack of visibility into equipment purchases and service relationships

UNCLASSIFIED 12 What We Need From You Actively Support The Enduring Security Framework The Comprehensive National Cybersecurity Initiative Help educate others Help build the Government - Industry Partnership