|
Server : Apache/2.4.62 System : FreeBSD fbsdweb2.web.rcn.net 14.1-RELEASE FreeBSD 14.1-RELEASE releng/14.1-n267679-10e31f0946d8 GENERIC amd64 User : www ( 80) PHP Version : 8.3.8 Disable Function : NONE Directory : /domains/roger.dnai/2004book/ |
Upload File : |
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3.org/TR/html4/loose.dtd">
<html><!-- InstanceBegin template="/Templates/2004_book.dwt" codeOutsideHTMLIsLocked="false" -->
<!-- DW6 -->
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<!-- InstanceBeginEditable name="doctitle" -->
<title>Center for Strategic Decision Research, Peter Struck, Michele Alliot-Marie, General George Joulwan, SACEUR, General James L. Jones, SHAPE, NATO, EU, BDLI, ILA, EADS, Northrop Grumman, Under Secretary Michael Wynne, Assistant Secretary Linton Wells, Ambassador William Burns, NATO Military Committee Chairman General Harald Kujat, General Dynamics, Boeing, Global Security Terrorism, Iraq, Afghanistan, Rainer Hertrich, David Stafford</title>
<!-- InstanceEndEditable --><link rel="stylesheet" href="../2002Book/emx_nav_right.css" type="text/css">
<script type="text/javascript">
<!--
var time = 3000;
var numofitems = 7;
//menu constructor
function menu(allitems,thisitem,startstate){
callname= "gl"+thisitem;
divname="subglobal"+thisitem;
this.numberofmenuitems = 7;
this.caller = document.getElementById(callname);
this.thediv = document.getElementById(divname);
this.thediv.style.visibility = startstate;
}
//menu methods
function ehandler(event,theobj){
for (var i=1; i<= theobj.numberofmenuitems; i++){
var shutdiv =eval( "menuitem"+i+".thediv");
shutdiv.style.visibility="hidden";
}
theobj.thediv.style.visibility="visible";
}
function closesubnav(event){
if ((event.clientY <48)||(event.clientY > 107)){
for (var i=1; i<= numofitems; i++){
var shutdiv =eval('menuitem'+i+'.thediv');
shutdiv.style.visibility='hidden';
}
}
}
// -->
</script>
<style type="text/css">
<!--
.style5 {font-weight: bold;
color: #000000;
font-family: Arial, Helvetica, sans-serif;
font-size: large;
}
.style7 {font-size: 2px}
.style8 {font-family: Arial, Helvetica, sans-serif}
.style16 {font-size: medium; color: #006699; font-weight: bold; }
.style17 {
font-size: x-small;
font-weight: bold;
}
.style18 {font-size: x-small}
.style197 {color: #000000}
.style209 {font-family: Verdana, Arial, Helvetica, sans-serif; font-weight: normal;}
.style217 {font-family: Verdana, Arial, Helvetica, sans-serif}
.style219 {font-style: normal; font-weight: normal; font-family: Verdana, Arial, Helvetica, sans-serif; }
.style222 {font-weight: normal; font-style: normal;}
.style21 {font-size: 11px}
-->
</style>
<!-- InstanceBeginEditable name="head" -->
<style type="text/css">
<!--
.style210 {font-family: Arial, Helvetica, sans-serif; font-size: small; }
.style225 {color: #006699; font-weight: bold; }
.style87 {font-size: small}
.style88 {
font-size: large;
color: #006699;
}
.style91 {
font-size: medium;
color: #006699;
}
.style92 {font-size: small; color: #006699; }
-->
</style>
<!-- InstanceEndEditable -->
</head>
<body onmousemove="closesubnav(event);">
<div class="skipLinks">skip to: <a href="#content">page content</a> | <a href="../2002Book/pageNav">links on this page</a> | <a href="#globalNav">site navigation</a> | <a href="#siteInfo">footer (site information)</a> </div>
<div id="masthead">
<h1 align="center" id="siteName"><strong>Center for Strategic Decision Research</strong></h1>
<div id="globalNav"> <div id="globalLink">
<a href="/index.html" id="gl1" class="glink" onmouseover="ehandler(event,menuitem1);"><span class="style18"><span class="style21">Home</span></span></a><a href="PeterStruckKeynote.htm" id="gl2" class="glink" onmouseover="ehandler(event,menuitem2);"><span class="style18"><span class="style21">Berlin '04</span></span></a><a href="../moscow03/weissingerbaylon.htm" id="gl3" class="glink" onmouseover="ehandler(event,menuitem3);"><span class="style18"><span class="style21">Moscow '03</span></span></a><a href="../berlin02/scharping.htm" id="gl4" class="glink" onmouseover="ehandler(event,menuitem4);"><span class="style21">Berlin '02</span></a><a href="../2001Book/workshop2001.htm" id="gl5" class="glink" onmouseover="ehandler(event,menuitem5);"><span class="style21">Helsingor '01</span></a><a href="../2000Book/workshop2000.htm" id="gl6" class="glink" onmouseover="ehandler(event,menuitem6);"><span class="style21">Berlin '00</span></a><a href="../99Book/workshop1999.htm" id="gl6" class="glink" onmouseover="ehandler(event,menuitem6);"><span class="style21">Budapest '99</span></a><a href="../98Book/workshop98.htm" id="gl6" class="glink" onmouseover="ehandler(event,menuitem6);"><span class="style21">Vienna '98</span></a><a href="../97Book/workshop97.htm" id="gl6" class="glink" onmouseover="ehandler(event,menuitem6);"><span class="style21">Prague '97</span></a><a href="../96Book/Workshop96.htm" id="gl6" class="glink" onmouseover="ehandler(event,menuitem6);"><span class="style21">Warsaw '96</span></a><a href="../96Book/Workshop96.htm" id="gl6" class="glink" onmouseover="ehandler(event,menuitem6);"><span class="style21">Dresden '95</span></a>
</div>
<!--end globalLinks-->
</div>
<!-- end globalNav -->
</div>
<!-- end masthead -->
<div id="pagecell1">
<!--pagecell1-->
<div id="breadCrumb"><br>
<table width="722" border="0" align="center">
<tr>
<td width="66" height="68"><p><img src="logo-kevin-web.jpg" width="60" height="66"></p> </td>
<td><div align="center"><span class="style5">21st International Workshop on Global Security - Berlin, 7-10 May 2004<br>
"Global Security: A Broader Concept for the 21st Century"</span></div></td>
</tr>
</table>
</div>
<div class="style7" id="pageName"> P</div>
<div id="pageNav">
<div id="sectionLinks">
<p align="center" class="style17"><strong>Table of Contents</strong></p>
<p class="style18"><a href="/2004book/PeterStruckKeynote.htm">German Defense Minister Peter Struck</a><span class="style217"><strong><a href="/2004book/Hertrich_Rainer.htm">EADS Co-CEO Rainer Hertrich</a></strong></span><span class="style217"><strong><a href="/2004book/Joulwan_George.htm">Fmr SACEUR Gen George Joulwan</a></strong></span><span class="style217"><strong><a href="/2004book/Overview of 21st Berlin Workshop.htm">Workshop Chairman Roger Weissinger-Baylon</a></strong></span><span class="style217"><strong><a href="/2004book/Gante.htm">BDLI President Hans-Joachim Gante</a></strong></span></p>
<p align="center" class="style18"><strong>Global Security: Political-Military Perspectives</strong></p>
<p align="left" class="style18"><span class="style217"><strong><a href="/2004book/Gen_Kujat.htm">NATO Mil Comm Chair Gen Harald Kujat</a></strong></span><span class="style217"><a href="/2004book/Gen_Jones.htm">SACEUR Gen James Jones</a><a href="/2004book/Amb_Burns.htm">US Ambassador to NATO Nicholas Burns</a><a href="/2004book/Linkevicius.htm">Lithuanian Defense Min Linas Linkevicius</a><a href="/2004book/Di_Paola.htm">Italian Chief of Defense Adm Giampaolo Di Paola</a><a href="/2004book/Kouts.htm">Estonian Chief of Defense Adm Tarmo Kouts</a><a href="/2004book/Back.htm">CINC AFNORTH Gen Gerhard Back</a><a href="/2004book/LtGen_R_Wolsztynski.htm">French Air Force Chief of Staff Gen Richard Wolsztynski</a><a href="/2004book/perruche.htm">EU Mil Staff Director Gen Jean-Paul Perruche</a></span></p>
<p align="center" class="style18"><strong>Defense Cooperation & Alliance Transformation</strong></p>
<p align="left" class="style18"><span class="style217"><a href="/2004book/Wynne.htm">US Under Secretary of Defense Michael Wynne</a><a href="/2004book/Klein.htm">US Assist Secretary of Defense Dale Klein</a><a href="/2004book/wells.htm">US Assist Secretary of Defense Linton Wells</a><span class="style222"><a href="/2004book/Lentz.htm">US Assist Sec of Defense Office Director of Info Assurance Robert Lentz</a><a href="/2004book/Quilty.htm">MITRE Vice President John Quilty</a> <a href="/2004book/Van_Dam.htm">Netherlands Air Force Assist Chief of Staff Gen Ruud van Dam</a> <a href="/2004book/Kihl.htm">Swedish Armed Forces Chief of Staff Gen Johan Kihl</a></span></span><span class="style219"><a href="/2004book/volkman.htm">US Under Secretary of Defense Office Director for Intl Coop Alfred Volkman</a><a href="/2004book/stafford.htm">Northrop Grumman Vice President David Stafford</a><a href="/2004book/Weise.htm">German Dep Armaments Director Hans-Heinrich Weise</a><a href="/2004book/Cunningham.htm">Boeing General Manager Eugene Cunningham</a><a href="/2004book/Zappa.htm">Alenia CEO Georgio Zappa</a><a href="/2004book/ranquet.htm">French Defense Ministry Dep Director Stat Affairs Gen Robert Ranquet</a></span></p>
<p align="center" class="style18"><strong>Black Sea Region,<br>
Ukraine, & Russia </strong></p>
<p class="style18"><span class="style219"><a href="/2004book/Pascu.htm">Romanian Defense Minister Ioan Pascu</a> <a href="/2004book/gonul.htm">Turkish Defense Minister Vecdi Gonul</a> <a href="/2004book/svinarov.htm">Bulgarian Defense Minister Nikolai Svinarov</a></span><span class="style209"><span class="style197"><a href="/2004book/bezhuashvili.htm">Georgian Defense Minister Gela Bezhuashvili</a></span><span #invalid_attr_id="10px 0px 0px 10px"><span class="style197"><a href="/2004book/Khandogiy.htm">Ukrainian Ambasador to NATO Volodymyr Khandogiy</a></span></span></span><span class="style219"><a href="/2004book/Skvorzov.htm">Russian Armed Forces Dep Chief of Defense Gen Alexander Skvorzov</a><a href="/2004book/Cede.htm">Austrian Ambassador to NATO Franz Cede</a><a href="/2004book/Meckel.htm">German Bundestag Member Marcus Meckel</a><a href="/2004book/Piontkovskiy.htm">Strategic Studies Ctr Director Andrei Piontkovskiy </a></span></p>
<p align="center" class="style18"><strong>Security for 21st Century</strong></p>
<p class="style18"><span class="style219"><a href="/2004book/Habibie.htm">Former Indonesian President B.J. Habibie</a></span><span class="style217"><a href="/2004book/Sedivy.htm">Fmr Czech Armed Forces Chief of Gen Staff Gen Jiri Sedivy </a><a href="/2004book/chandra.htm"> Indian Dep Natl Security Adv Satish Chandra</a><a href="/2004book/mehta.htm">Indian Armed Forces Gen Ashok Mehta</a><a href="/2004book/deruyt.htm">Belgian Ambassador to UN Jean de Ruyt </a><a href="/2004book/perrin.htm"> French Defense Ministry Strat Affairs Dir Marc Perrin de Brichambaut</a><a href="/2004book/gergorin.htm"> EADS Exec Vice President Jean-Louis Gergorin</a></span><span class="style217"><a href="/2004book/Maulny.htm">IRIS Dep Director Jean-Pierre Maulny</a></span><span class="style217"><a href="/2004book/fasslabend.htm">Fmr Austrian Defense Min Werner Fasslabend</a></span><span class="style217"><a href="/2004book/Novotny.htm">Czech Ambassador to India Jaromir Novotny </a><a href="/2004book/naumann.htm">Fmr NATO Mil Comm Chair Gen Klaus Naumann </a><a href="/2004book/George.htm">UK Parliament Member Bruce George</a></span><br>
</p>
</div>
</div>
<div id="content">
<div class="story"><!-- InstanceBeginEditable name="EditRegion1" -->
<!-- Start of StatCounter Code -->
<script type="text/javascript">
var sc_project=3086157;
var sc_invisible=0;
var sc_partition=27;
var sc_security="33bf0688";
</script>
<script type="text/javascript" src="http://www.statcounter.com/counter/counter_xhtml.js"></script><noscript><div class="statcounter"><a class="statcounter" href="http://www.statcounter.com/"><img class="statcounter" src="http://c28.statcounter.com/3086157/0/33bf0688/0/" alt="free website hit counter" /></a></div></noscript>
<!-- End of StatCounter Code -->
<div class="story">
<h1 align="center" class="style196 style88">Security Challenges of Netcentricity</h1>
<p align="center" class="style91" >Mr. Robert Lentz<br>
Director of Information Assurance, <br>
Office of the U.S. Assistant Secretary of Defense for Networks and Information Integration</p>
<div align="center">
<table width="60%" border="0">
<tr>
<td><img src="Lentz8k.jpg" width="112" height="142"></td>
<td> </td>
<td><div align="left"><span class="style87"><span class="style225">Robert Lentz</span><br>
<em>"By 2010.... <FONT COLOR="#1f1a17"><FONT COLOR="#1f1a17">Unimaginable computer power will challenge some of our best encryption technology"</FONT></FONT><FONT COLOR="#1f1a17"><FONT COLOR="#1f1a17"></FONT></FONT></em></span></div></td>
</tr>
</table>
</div>
<p align="left" class="style92" ><FONT COLOR="#1f1a17">At the 2003 workshop we initiated serious discussion regarding the security challenges to achieving netcentricity. I am very honored to address this prestigious group again on this critical subject. To begin, I would like to discuss the security trends that are likely by 2010:</FONT> </p>
<UL class="style210">
<LI><FONT COLOR="#1f1a17"> One cyberbug will hit the Internet every five minutes, every hour of every day; <FONT COLOR="#1f1a17">the number of security incidents will swell to 400,000 a year, or 8,000 per week. </FONT> </FONT></LI>
<LI><FONT COLOR="#1f1a17"> <FONT COLOR="#1f1a17">Windows will approach 100 million lines of code. </FONT> </FONT></LI>
<LI><FONT COLOR="#1f1a17"> <FONT COLOR="#1f1a17">The average PC will cost only $99 but contain nearly 200 million lines of code; within that code there will be two million bugs. </FONT> </FONT></LI>
<LI><FONT COLOR="#1f1a17"> <FONT COLOR="#1f1a17">Unimaginable computer power will challenge some of our best encryption technology. </FONT> </FONT></LI>
<LI><FONT COLOR="#1f1a17"> <FONT COLOR="#1f1a17">Sophisticated hacker tools will be widely available. </FONT> </FONT></LI>
<LI><FONT COLOR="#1f1a17"> <FONT COLOR="#1f1a17">There will be another half billion Internet users. </FONT> </FONT></LI>
</UL>
<P ALIGN="LEFT" class="style210"><FONT COLOR="#1f1a17"> <FONT COLOR="#1f1a17">As these trends indicate, netcentricity is a dual-edged sword. We have heard the tremendous operational advantages. But the security realities are leaving us at a critical crossroads. </FONT></FONT></P>
<P ALIGN="center" class="style210 style91"><B>ISSUES SURROUNDING NETCENTRICITY</B></P>
<P ALIGN="LEFT" class="style210"><FONT COLOR="#1f1a17"> <FONT COLOR="#1f1a17">One of the continuing realities from the 2003 workshop is the economic advantage of pursuing netcentricity: The force-multiplying effect and the awesome operational opportunities cannot be ignored. But none of this will have meaning if security issues are not addressed upfront, aggressively, not on the cheap, and globally.</FONT></FONT></P>
<P ALIGN="LEFT" class="style210"><FONT COLOR="#1f1a17"> <FONT COLOR="#1f1a17">However, we cannot assume that this will happen. The costs of adding security are significant if it is done after the architecture is locked in, the code is written, the weapons platform has been acquired, evaluation has begun, or, worse, a satellite system has been launched. Costs and operational damage are other facts of life of degraded infrastructure elements, of which we have only seen a glimpse. </FONT> </FONT></P>
<P class="style210"><FONT COLOR="#1f1a17"><FONT COLOR="#1f1a17">Software is the only modern technology that ignores quality until it is tested. Therefore the norm is one defect per every seven to ten lines of code. However, 99 percent of successful cyberattacks are against known vulnerabilities, and 77 percent of these are the result of design defects. Though cyberevents are preventable, we react to them rather than anticipate them, and each patching of the system costs from one million to four million dollars. </FONT> </FONT></P>
<p ALIGN="LEFT" class="style210"><FONT COLOR="#1f1a17"> <FONT COLOR="#1f1a17">In addition, speed is everything in this business, not only for conducting network-centric operations but for defending the networks. Implementing layers of defense will do no good without establishing horizontal relationships both domestically and internationally. </FONT></FONT></p>
<p ALIGN="center" class="style210 style91"><b>THE NEED FOR NETCENTRIC CAPABILITIES</b></p>
<P ALIGN="LEFT" class="style210"><FONT COLOR="#1f1a17"> <FONT COLOR="#1f1a17">As we transform our information-assurance capabilities to enable netcentricity, we need to provide several key services. First, we must ensure authenticity by developing reliable cyber-identification credentials that will ensure a person’s or a computer’s identity without worrying that an adversary is trying to masquerade as someone legitimate. In addition, we must develop interoperable standards that bridge all sectors, including international partners. </FONT> </FONT></P>
<P ALIGN="LEFT" class="style210"><FONT COLOR="#1f1a17"> <FONT COLOR="#1f1a17">Another key IA service will be “automation of privilege management.” This service will easily provide end-users with access to necessary information resources regardless of where they are located on the network; conversely, it will help the owners of the information sources manage the increased demand for access that netcentricity will bring. </FONT> </FONT></P>
<P ALIGN="LEFT" class="style210"><FONT COLOR="#1f1a17"> <FONT COLOR="#1f1a17">Cyberattacks happen often and often with great stealth. Critical operational processes must therefore continue to function effectively while under cyberattack. Our information-assurance strategy is based on the idea that appropriate defenses will stop most attacks. These protective mechanisms include physical, electronic, and procedural components as well as capabilities to alert and warn us of attacks. Because of their importance, such defenses must be kept current during rapid evolutions of technology, varying attack strategies, and organizational changes, but it will take significant technical and operational efforts to make this happen. If an adversary breaches our protections, we must have the capability to detect, contain, and then respond to the attack. </FONT> </FONT></P>
<P ALIGN="LEFT" class="style210"><FONT COLOR="#1f1a17"> <FONT COLOR="#1f1a17">IA entails high levels of situational awareness, significant analytical capabilities to characterize the nature and extent of an attack, the formulation and coordination of effective courses of action, and the ability to rapidly execute approved courses of action across a global infrastructure. The tools and procedures required to protect against and react to attacks in a highly technical, complex, multi-organizational environment are correspondingly sophisticated. </FONT> </FONT></P>
<P ALIGN="LEFT" class="style210"><FONT COLOR="#1f1a17"> <FONT COLOR="#1f1a17">But we can not afford to let the wireless revolution sneak up on us again. However, right now, our confidence in the security of wireless systems is not great. In addition, the cost to address wireless trust in a user-friendly way is very high. </FONT></FONT></P>
<P ALIGN="center" class="style210"><span class="style16">CONCLUDING REMARKS</span></P>
<P ALIGN="LEFT" class="style210"><FONT COLOR="#1f1a17"> <FONT COLOR="#1f1a17">It is certainly a challenging time for the information-assurance community. </FONT> <FONT COLOR="#1f1a17">The pace of real-world operations remains high, and we have forces in harm’s way fighting terrorism in many places throughout the world. But this is an international team fight. And not only do our military operations depend on our success, but in a broader sense the computer infrastructures that drive our economies and service our people also depend on our collective success. We must become organizationally agile and operationally adaptive. </FONT> </FONT></P>
<P ALIGN="LEFT" class="style210"><FONT COLOR="#1f1a17"> <FONT COLOR="#1f1a17">Therefore we must focus more on the processes and capabilities that provide products and services. I agree that cultural change is our biggest hurdle. We must re-think and re-implement our accountability because of the paradigm shift to network-centric operations. Law enforcement must also prosecute cyberattackers. And we need vigorous IA discoveries and inventions, both scientific and technical, to complement and keep pace with IT innovations. Finally, we must do this work together for the greatest effectiveness and affordability. All of us must trust the network and the software; a security expert said recently that software assurance is the next Manhattan Project, at a global level. </FONT> </FONT></P>
<P class="style210"><FONT COLOR="#1f1a17"><FONT COLOR="#1f1a17">It is critical for us to know that information cannot be exploited or modified, and that the wrong people do not have access to our systems. We also need to know that the net will be available when a decision-maker needs it. Lastly, when we look the commander, the CEO, or the policy-maker in the eye, and tell them to trust the network, we need to know what we are talking about. </FONT> </FONT></P>
<p class="style87"> </p>
<p class="style87"><br>
</p>
</div>
<!-- InstanceEndEditable --></div>
<div class="story">
<table width="100%" cellpadding="0" cellspacing="0" summary="">
<tr valign="top">
<td class="storyLeft"> <p>
</p></td>
</tr>
</table>
</div>
</div>
<!--end content -->
<div class="style8" id="siteInfo"> <a href="#">Top of page </a> | <a href="/index.html">Home</a> | ©2003
Center for Strategic Decision Research</div>
</div>
<!--end pagecell1-->
<br>
<script type="text/javascript">
<!--
var menuitem1 = new menu(7,1,"hidden");
var menuitem2 = new menu(7,2,"hidden");
var menuitem3 = new menu(7,3,"hidden");
var menuitem4 = new menu(7,4,"hidden");
var menuitem5 = new menu(7,5,"hidden");
var menuitem6 = new menu(7,6,"hidden");
var menuitem7 = new menu(7,7,"hidden");
// -->
</script>
</body>
<!-- InstanceEnd --></html>