海角大神

The Defense Advanced Research Projects Agency has lived at the聽sharp edge of military research ever since its creation in the wake of Russia鈥檚 Sputnik satellite聽to ensure America "avoided that kind of surprise again," Arati Prabhakar, the agency鈥檚 director, said Thursday in a Passcode event highlighting advancements in cybersecurity research.

Dr. Prabhakar, along with a panel of cybersecurity experts, outlined what the Pentagon 鈥� and the rest of the US government 鈥� is doing to preparing for the next wave of cyberthreats. Here's what we learned:

1. DARPA鈥檚 Plan X might make cyberdefense intuitive

聽started with the premise that part of what makes cyberwarfare tricky is that looking at computer code is "abstract and arcane," Prabhakar says. "It鈥檚 like ...聽talking dolphin to you."

The question that intrigued Plan X developers is how to show threats聽in a way people could visualize 鈥� showing an explosion on screen, for example.

US troops could use Plan X to be aware of a Wi-Fi router that has previously been used to trigger an improvised explosive device.聽In other words, she adds, Plan X could create "a level of intelligence that hadn鈥檛 been possible before."

2. DARPA is building a better way to rate security software

The agency recently to former DARPA employee聽Peiter Zatko (a security researcher also known as Mudge)聽to create a way to rate software when it comes to security, thus creating "a little bit better understanding" about how well they work, Prabhakar says.

"This could be important," she adds, in the effort to create a more "robust economic model" for security and the private sector.聽

What's more,聽Prabhakar says, the security community as a whole should be working vigorously to secure the burgeoning Internet of Things marketplace. Or else, she says, "It's going to be really painful."

3. Data manipulation is a聽top concern

Director of National Intelligence James Clapper and the head of US Cyber Command, Adm. Mike Rogers, cited the danger of data manipulation by enemy hackers as one of their top concerns in congressional testimony earlier this month.

For her part, Prabhakar said that "about a year ago," she spoke with then-Chairman of the Joint Chiefs of Staff Martin Dempsey about the dangers of, for example, the military receiving the wrong information.聽"His reaction was, 'It鈥檚 one thing if my systems just go down 鈥� I can deal with that 鈥� but it鈥檚 a different thing altogether if I can鈥檛 trust what my systems are telling me.' "

鈥�4. Consumers are often unfairly blamed聽

鈥�"I鈥檓 of the belief that we can鈥檛 expect the users to be cybersecurity geniuses," says聽Doug Maughan, director of the Cyber Security Division at the Department of Homeland Security鈥檚 Science & Technology Director. "Grandma鈥檚 not going to know anything."

Instead, "I think it鈥檚 high time we start holding people accountable for producing products that may be insecure," he argues.聽

"It鈥檚 just like water and air," he adds. "Cyber should be secure, and you shouldn鈥檛 have to worry about whether it is or not."

5. Top cybersecurity officials still concerned about Senate's Cyber Information Sharing Act

One of DHS's key concerns about the information-sharing bill is the provision that the agency should serve as the point of contact for any national cyberthreat.

"I certainly share those concerns," Maughan says. The problem is that any national cyberthreat must go through DHS first to coordinate threats that might directly impact the Pentagon, for example, or the National Security Agency.

"I think there is this question of, in the event of a cyberincident of some kind, do you really want some centralized entity [like DHS] being the router for everybody?" he says. "Isn鈥檛 there a better way to share information?"