On Cybersecurity, Take a Lesson from Israel (Robert Knake, Council on Foreign Relations)

http://blogs.cfr.org/cyber/2016/12/15/on-cybersecurity-take-a-lesson-from-israel/

Congress Needs to Warn Russia on Election Interference (Robert Knake, CFR)

http://blogs.cfr.org/cyber/2016/09/12/congress-needs-to-warn-russia-on-election-interference/

No, the White House Did Not Create a Color Coded Alert System for Cyber (Robert Knake, CFR)

Yesterday, the White House released a new policy document on the management of cyber incident response. The document, Presidential Policy Directive (PPD) 41, captures over a decade of lessons learned on how federal agencies respond to cyber incidents. It is clear about what federal agencies will do (as well as what they will not do) and sets up a series of mechanisms for coordinating federal action with private companies.

http://blogs.cfr.org/cyber/2016/07/27/no-the-white-house-did-not-create-a-color-coded-alert-system-for-cyber/

Cash for Clunkers: Cybersecurity Edition (Robert Knake, CFR)

http://blogs.cfr.org/cyber/2016/06/06/cash-for-clunkers-cybersecurity-edition/

Ted Cruz Wants to Shrink Government, Except When It Comes to the Internet (Robert Knake, CFR)

It is a strange world we are living in when a Democratic President wants to reduce government interference in the private sector and the GOP’s standard bearer for limited government is fighting to stop him. That is what is happening with the continued fight over the Internet Corporation for Assigned Names and Numbers (ICANN) and its contract with the National Telecommunications and Information Agency (NTIA)

http://blogs.cfr.org/cyber/2016/05/18/ted-cruz-wants-to-shrink-government-except-when-it-comes-to-the-internet/

FBI to Apple: We Would Probably Disclose the iPhone Flaw if We Knew What It Was (Robert Knake, CFR)

With yesterday’s announcement that the FBI had gained access to the phone used by Syed Rizwan Farook, the San Bernardino gunman, the tech community is clamoring to find out how they did it. Many commenters believe that any vulnerability used to access the data must be subject to the Vulnerabilities Equities Process (VEP), the process by which the U.S. government decides whether to disclose a computer vulnerability (partially declassified here).

http://blogs.cfr.org/cyber/2016/03/29/fbi-to-apple-we-would-probably-disclose-the-iphone-flaw-if-we-knew-what-it-was/

Field Notes From the RSA Conference (Robert Knake, CFR)

A couple of nights ago, the strength of the public-private partnership for cybersecurity was on full display. There were senior government officials. There were private sector executives. There were hackers. The only thing different from most such gatherings was the venue–the dance floor at the top of the Sir Francis Drake Hotel. Ah, welcome to RSA 2016.

http://blogs.cfr.org/cyber/2016/03/07/field-notes-from-the-rsa-conference/

Paying Ransom on Ransomware Should be Illegal (Robert Knake, CFR)

Two weeks ago, a California hospital paid $17,000 to cyber criminals who had broken into its computer network and taken its data hostage. The attackers used ransomware, a type of malicious software, to encrypt the files at Hollywood Presbyterian Medical Center, and would only provide the decryption key upon payment in bitcoin of the ransom.

http://blogs.cfr.org/cyber/2016/02/29/paying-ransom-on-ransomware-should-be-illegal/

The Real Lesson of the Apple-FBI Showdown: Cybersecurity Isn’t Hopeless (Robert Knake, CFR)

It may be hard to imagine but there are probably moments when Apple CEO Tim Cook and FBI Director Jim Comey probably have the same fervent wish: Would someone–anyone–please figure out how to hack into Syed Rizwan Farook’s darn iPhone.

http://blogs.cfr.org/cyber/2016/02/18/the-real-lesson-of-the-apple-fbi-showdown-cybersecurity-isnt-hopeless/

The President’s Cybersecurity Plan Is More of the Same (And That’s a Good Thing) (Robert Knake, CFR)

Today, the Obama administration announced the Cybersecurity National Action Plan. Already turned into an acronym in Washington, DC, CNAP is not so much a bold new direction as a tidying up of loose ends to set the stage for the next administration.

http://blogs.cfr.org/cyber/2016/02/09/the-presidents-cybersecurity-plan-is-more-of-the-same-and-thats-a-good-thing/

All I Want for Christmas Are Amendments to the Cybersecurity Act (Robert Knake, CFR)

Christmas comes but once a year and, for the last two years, Congress has delivered a bag of goodies in cybersecurity legislation. While most corporate counsels are still trying to figure out what the Cybersecurity Act of 2015 (CSA) does for them, I’ll take a cue from my five-year-old and start composing my wish list for next year now.

http://blogs.cfr.org/cyber/2016/02/08/all-i-want-for-christmas-are-amendments-to-the-cybersecurity-act/

(Istituto fondamentale - USA) At Black Hat, Hottest Cyber Product Didn’t Have a Booth (Robert Knake, Council on Foreign Relations)

http://blogs.cfr.org/cyber/2015/08/10/at-black-hat-hottest-cyber-product-didnt-have-a-booth/