Cyber Attacks, Prevention, and Countermeasures

Abstract

In response to the ever-increasing number of cyber attacks on both private companies and the United States government, U.S. Congress has introduced the Cybersecurity Enhancement Act of 2007, the National Commission on American Cybersecurity Act of 2008, the Cybersecurity Act of 2009, the Cybersecurity and American Cyber Competitiveness Act of 2011, and most recently the Cybersecurity Act of 2012.

There are only two types of companies: those that have been hacked, and those that will be. Even that is merging into one category: those that have been hacked and will be again.

—FBI Director Robert Mueller RSA conference (March 1, 2012).

The attack surfaces for adversaries to get on the Internet now include all those mobile devices. The mobile security situation lags. It’s far behind.

—Army Gen. Keith Alexander, Director of National Security Agency and Commander of U.S. Cyber Command DEF CON 20 (July 27, 2012).

There is no such thing as 100 % security, on- or offline, but we must strive to strengthen our defenses against those who are constantly working to do us harm…. The alternative could be a digital Pearl Harbor—and another day of infamy.

—U.S. senators Joe Lieberman, Susan Collins and Tom Carper (July 7, 2011).