Cyber Security – The concealment of elements & the Responsibilities
Cyber Security
Information about the somewhat successful or successful cyber attacks on companies and government services often remains hidden. Despite the efforts of specialized and reliable security companies, services and companies rarely share critical information, rarely cooperate for security audits, and very rarely issue timely warnings for other organizations that may be at risk.
But let's also talk about today's companies working in the field of cybersecurity . Every piece of information remains locked in their "lockers" as they translate it into dollars. Have you ever noticed security companies working together for the common good? The phenomenon is very rare, like exceptions that prove the rule.
Why is it so difficult to understand that the exchange of such information and collaboration can contribute to solving problems and managing risks in many other areas?
What lies behind this long‑standing corporate reluctance to share information about attacks (successful or not) in cyberspace?
Why do we have to consider 1000 possibilities every time we want to publish such information, fearing a legal system that was created before the Internet?
The report of each incident can only bring good to the collective interest, but individual participants may face all kinds of legal problems, reputation problems, or market decline if it is heard that they are victims of hacking.
The Internet has no limits, and there are no armored doors. Digital locks consist of binary digits. Thus, breaches are inevitable, and as we have seen, they also happen in “best families.”
Hesitation and secrecy protect no one, and sustain a myth as well as a legal system that cannot protect today's digital world.
Releasing data can help us understand the full extent of a vulnerability, which will play an essential role in defense .
Proposals?
(The following proposals are as they appear, as mentioned on our friendly site: iGuRu.gr)
All of the above is not easy, as it contains words that many do not like: Responsibility and Exile.
Beyond each of our individual responsibilities, service providers, security companies, and governments also bear responsibility.
Perhaps recently we have seen examples (that confirm the rule) of suppressing attacks by alliances of security companies (Microsoft, Symantec, Kaspersky, etc.) but one rooster does not bring Spring.
A framework should be organized that will allow businesses to share incident data with others anonymously. This approach will limit the risk of a bad reputation, through exposure.
States now, because everyone needs the support of the government.
Legal circles and lawmakers should very seriously consider disclaiming legal liability for companies or individuals who choose to share incident data for the purpose of combating cyberattacks ,providing early warning to others at risk.
Advanced? Probably not, for the simple reason that the Internet now runs faster than us.
Why scandal? This goes to security companies, which should start acting collectively… overlooking profits…. or discovering new sources of wealth.
With a final account we understand that the least utopian scenario is the release of data by law.
source: iGuRu.gr
