The shortcut to improved security [is] universal, repeatable monitoring, ... The Army is now trying Harris STAT. The big difference is that NASA picked the most critical vulnerabilities rather than looking at all 2,000. The latter always leads to overload and lack of action. NASA's approach works. |
There are no credit card numbers ... no [Defense Department] secrets. Although it would be terribly embarrassing for that data to get out, it's not terribly valuable ... unless somebody's trying to embarrass people. |
There is a wave of people looking for infected machines. We are getting into the second wave of infections. We haven't figured what they are doing. But we are seeing a very big wave of scanning. |
This illustrates that even technologically savvy people have a hard time fighting off denial of service attacks. |
We have made enormous progress over the past five years by forcing the vendors to deliver automated patching. Now the bad guys are saying: 'You did that, now we're going after the applications.' Now we have to start all over again. |