Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure

Latest Episodes:

Innovating at Speed: Advancing AI with Teresa Shea and Glenn Gaffney Jun 19, 2024

Show notes

In this episode Frank Cilluffo engages with two distinguished former intelligence officials, Teresa Shea and Glenn Gaffney, to dissect the multifaceted world of artificial intelligence (AI) in the realm of cybersecurity and intelligence gathering. They delve into the definitions, applications, and implications of AI, focusing on its role in enhancing security measures against increasingly sophisticated cyber threats. Main Topics

Definitions and distinctions between General AI, Generative AI, and specific AI applications
The evolution and current state of AI in cybersecurity and intelligence gathering
The human element in AI development and application
Ethical considerations and the need for a human-centric approach in AI deployment
Public-private partnerships and their role in advancing AI technology in critical sectors

Key Quotes "General AI, we're really talking about a cyber brain, a bit of silicon, or a machine that creatively thinks and acts the way a brain acts and thinks." - Glenn Gaffney "The human in the loop will always be relevant." - Frank Cilluffo "Not everything you get back from these AI generating machines is accurate. So be sure and check the facts." - Teresa Shea "Cybersecurity in particular is one of the areas that I feel like we need to apply AI first and foremost because of the sheer level of complexity and speed that is at hand in all of the networks that we have." - Glenn Gaffney "I think there's a real role for the intelligence community to play in the open world and in these public-private partnerships, because so many of these things used to be the purview of nation-states and nation-states. They're not anymore." - Glenn Gaffney "Let's not underestimate our adversaries either in the amounts of money, in resources, for example, that China is pouring into AI. The way they're working together with China, Russia, Iran, North Korea. Let's not underestimate their partnerships and what they get when they combine." - Teresa Shea "We need to be able to fail and you fail fast and you recover faster." - Teresa Shea Guest Bios Teresa Shea: Former Director of Signals Intelligence at the National Security Agency, with extensive experience at In-Q-Tel. Shea is celebrated for her contributions to national security and intelligence, boasting numerous presidential and intelligence awards. Glenn Gaffney: Former Director of Science and Technology at the Central Intelligence Agency, also a recipient of multiple intelligence and presidential awards. Gaffney's career has been marked by his innovative approach to technology and security, particularly in the development and application of AI in intelligence operations. Resources

Treasury's Cyber Defenses and AI Future with Todd Conklin Jun 12, 2024

Show notes

In this episode of Cyber Focus, host Frank Cilluffo engages with Todd Conklin, the Chief Artificial Intelligence Officer and Deputy Assistant Secretary for Cyber at the Department of Treasury. They delve into recent advancements and initiatives the Treasury has been involved in, focusing on the integration of AI and cybersecurity within financial services. The conversation highlights the strategic efforts being made to bolster security measures, manage risks, and harness the potential of AI to protect and innovate within the sector.

Main Topics Covered

Role and responsibilities of a Chief Artificial Intelligence Officer in the government sector.
Insights into Project Fortress and its objectives for proactive cybersecurity defense.
The impact and implications of AI on cybersecurity practices.
Challenges and strategies for small financial institutions in adopting cloud and AI technologies.
The Treasury's collaborative efforts with other federal agencies and the private sector to enhance cybersecurity resilience.
Initiatives to leverage international partnerships to combat cyber threats globally.

Key Quotes

"We're trying to get the body of work that we published on cloud and AI... out to a broader cybersecurity audience." - Todd Conklin
"You cannot do cyber today without an appreciation for artificial intelligence." - Frank Cilluffo
"The financial services sector being a place of innovation... and Treasury being a place of innovation is a surprise to a lot of people." - Todd Conklin
"We've been leading a thorough incident response analysis and that small entity had an outsized impact..." - Todd Conklin
"We need to automate the flow of intelligence from the US government to the sector defense operators." - Todd Conklin
"The Treasury model is to ensure that the sector has the ability to help us curate what those priorities should be." - Todd Conklin

Relevant Links/Resources:

Briefings to Action: Christopher Porter on Cyber Intelligence for Leaders Jun 05, 2024

Show notes

Today Frank Cilluffo sits down with Christopher Porter, former National Intelligence Officer for cyber matters and current executive at Google. They delve into the complexities of cybersecurity during government transitions, the critical role of intelligence briefings, and the impact of emerging technologies on national security. Drawing from his extensive background in both public and private sectors, Christopher provides insightful commentary on the evolving threats and the necessity of translating technical details into actionable intelligence for policymakers. This episode underscores the importance of strategic thinking and proactive measures in managing cyber risks. Main Topics

The significance of effective intelligence briefings during government transitions.
Understanding and anticipating policymakers' needs in cybersecurity.
Challenges in translating technical issues for decision-makers.
The evolving role of AI in cyber threat intelligence and its implications.
Innovative approaches in law enforcement to tackle cyber threats.
Addressing vulnerabilities in supply chains and implementing zero trust models.
The growing threat from commercial cyber actors and spyware.
Strategic declassification of intelligence to enhance public and private sector security.

Key Quotes "Your core job is to improve decision making. To do that, you have to understand at some level how the person you're talking to makes decisions." - Christopher Porter

"I'm an optimist that artificial intelligence related cyberthreat intelligence tools, they're going to make hopefully people like me more effective at doing our jobs. But you're still going to need someone, a human being, to apply that to your organization." - Christopher Porter "Dwell time is going down and down and down, so it's being detected quicker than in the past. You know, the flipside of that is adversaries are moving quicker once they get into a network." - Christopher Porter "When you think about artificial intelligence and how that works in a cyber threat intelligence context, let me refer back to a comment I made earlier. Your job is to improve decision making." - Christopher Porter

Guest Bio Christopher Porter is a distinguished cybersecurity expert who has served as the National Intelligence Officer for cyber matters and currently works at Google. His extensive career spans significant roles in both the public and private sectors, focusing on intelligence analysis and strategic cybersecurity initiatives. His work bridges the gap between technical details and high-level decision-making, providing critical insights into the evolving threats and solutions in the cybersecurity landscape. Resources InfraGard National Intelligence Council Book: Decision Advantage by Jennifer Sims Porter's McCrary Institute Senior Fellows Bio

Minimizing Cyber Risks: Steve Kelly on Secure Strategies May 29, 2024

Show notes

In this episode of Cyber Focus, Frank Cilluffo hosts Steve Kelly, Chief Trust Officer at the Institute for Security and Technology. With a rich background that includes roles at the National Security Council and the FBI, Steve shares his deep insights into the cybersecurity landscape. The discussion covers the expanding attack surface due to emerging technologies, the convergence of physical and cyber domains, and the critical importance of trust and security in today's digital world.

Main Topics:

The increasing attack surface from consumer devices, industrial IoT, clean energy tech connecting to the grid
Rethinking network architecture and security models in the era of dissolving perimeters
The potential for AI and machine learning to aid defenders by automating detection/response at scale
Creative law enforcement operations to disrupt cybercriminal infrastructure and business models
The need to scale public-private operational collaboration against cyber threats
IST's work on AI governance, trust & safety practices, and securing critical infrastructure

Key Quotes:

"One of the challenges in the network defense realm is this kind of data deluge that the average network defender is experiencing, that there's just more telemetry, more signaling, more alerts, and more events that can possibly be looked at and interpreted and actioned." - Steve Kelly
"There's a need to fundamentally rethink network architecture from a security standpoint so that we do not have vulnerable assets connected to the public Internet." - Steve Kelly
"The idea is we want to have American products be marketable and trusted on the global marketplace as well as foreign products that are trustworthy to be acceptable here." - Steve Kelly on the U.S. Cyber Trust Mark
"If we're relying on the end user to unbox the device and go in and change a password… that's not a winning solution." - Steve Kelly
"I think that there's a need to fundamentally rethink network architecture from a security standpoint so that we do not have vulnerable assets connected to the public Internet that can be found by bad actors." - Steve Kelly
"If it's discoverable, it will be exploited." - Steve Kelly

Relevant Links/Resources

Guest Bio Steve Kelly is the Chief Trust Officer at the Institute for Security and Technology (IST). Prior to IST, he served as a Special Assistant to the President on the National Security Council staff, focusing on emerging technology risks like AI, quantum computing, and 5G/6G. Steve retired from the FBI in 2022 after over 20 years as a cyber investigator and supervisor on the agency's cyber national security squad.

Redefining Cybersecurity: Michael Daniel's Vision for a Safer Digital Future May 22, 2024

Show notes

In this episode of Cyber Focus, host Frank Cilluffo engages in an insightful discussion with Michael Daniel, President of the Cyber Threat Alliance, former Cybersecurity Coordinator for President Obama, and McCrary Institute Senior Fellow. They delve into the intricacies of cybersecurity policy, the evolution of cybercrime as an industry, and the importance of operational collaboration between the public and private sectors. Michael shares his journey into the cybersecurity realm, offers his expert analysis on current strategies, and emphasizes the need for innovative approaches to cybersecurity challenges.

Main Topics Covered

Michael Daniel's journey and insights into cybersecurity leadership
Shifting the cybersecurity burden from end-users to larger entities
The importance of operational collaboration in cybersecurity
The industrialization of cybercrime and its implications
Strategies for imposing costs on bad cyber actors
Funding and resourcing critical Internet functions
Lessons from the cyber dimensions of the Russia-Ukraine conflict

Quotes

Michael Daniel: "The bad guys are getting in through a hole that we know about that we have a fix for, but we just haven't done it."
Frank Cilluffo: "If you can figure out how to marshal and mobilize the economic instruments, we can start moving the ball."
Michael Daniel: "We need to help shape those incentives so that we get the market forces working for us rather than against us."
Frank Cilluffo: "We've got to shift the calculus from a government-leads-private-sector-follows mentality."
Michael Daniel: "In cyberspace, we have an unusual set of capabilities that are resident in the private sector in a way that are not in most other policy areas."

Resources Mentioned

Guest Bio

Michael Daniel is the President of the Cyber Threat Alliance, an organization that facilitates intelligence sharing and collaboration among cybersecurity companies. He previously served as the Cybersecurity Coordinator and Special Assistant to President Obama, where he was responsible for coordinating the federal government's cybersecurity policies and activities. Michael also has extensive experience in the Office of Management and Budget, overseeing intelligence programs and budgets. He is widely recognized for his contributions to the field of cybersecurity and his efforts to improve national and global cyberdefense strategies.

Cyber Focus at RSAC 2024: Google Cloud's Phil Venables May 15, 2024

Show notes

In this episode of Cyber Focus, host Frank Cilluffo sits down with Phil Venables, Chief Information Security Officer for Google Cloud. They discuss Venables' work co-leading the President's Council of Advisors on Science and Technology's report on cyber-physical resilience, and its key recommendations including creating a national critical infrastructure observatory. The conversation also covers Google's focus on secure-by-design and secure-by-default, the implications of AI/generative AI for cybersecurity, and the evolving role of the CISO as more of a chief risk officer.

Main Topics Covered President's Council of Advisors on Science and Technology Report to the President on Strategy for Cyber-Physical Resilience

Creating a national critical infrastructure observatory

Secure by design and secure by default at Google

Implications of AI/generative AI for cybersecurity defenders

Evolution of the CISO role to be more like a chief risk officer

Current cyber threat landscape and basic defenses still needed

Public-private partnership between tech companies and government

Quotes "It's not just about security, privacy, or compliance. It's about trust and safety… The bold but responsible use of AI." - Venables on ethical AI concerns

"We have much more heavily engaged with our government partners, not just here in the US, but around the world, because we recognize our position in supporting critical infrastructures." - Venables on Google's public-private partnerships.

"[Executives] also need to make sure that there's the resources in the ranks in their organizations to get security done." - Venables on executive support for security

"...implementing strong phishing resistant multi-factor authentication, keeping systems up to date, segmenting and all the basic hygiene...when you do it, you mitigate a whole bunch of risks." - Venables on basic cyber hygiene defenses

Resources

President's Council of Advisors on Science and Technology report on cyber-physical systems - Press Release, Executive Summary, Full Report

Google's Secure AI Framework (SAIF)

Secure By Design

Secure By Default

Bio Phil Venables is the Chief Information Security Officer for Google Cloud. Prior to Google, he spent 20 years at Goldman Sachs as CISO and Chief Operational Risk Officer, establishing the firm as a cybersecurity leader. Venables co-led the President's Council report on enhancing cyber-physical resilience of critical infrastructure, recommending a national infrastructure observatory. He has co-founded multiple financial sector cybersecurity initiatives and served on boards for NIST, NYU, NSA, and others. Widely recognized for his leadership, Venables has received the RSA Conference Award, FS-ISAC Critical Infrastructure Award, and other top honors. With over 25 years of cross-disciplinary experience across finance, technology and risk management, he brings a unique perspective to Google Cloud's security efforts.

Cyber Focus at RSAC 2024: GDIT's Matt Hayden May 13, 2024

Show notes

In this episode of Cyber Focus Frank Cilluffo and Matt Hayden discuss the intricate challenges posed by cyber threats and the role of organizations like CISA in coordinating defense efforts. They discuss the influence of emerging technologies such as AI and quantum computing, the impact of emerging technologies on defenses, and the zero trust security model to enhance resilience. Main Topics Covered

Critical infrastructure threats and vulnerabilities
Living off the land techniques used by attackers
Deterrence strategies and creating playbooks for different threat actors
Role of innovation and emerging technologies like AI, quantum, 5G/6G
Convergence of physical and cyber security
Zero trust security model
Importance of resilience in critical infrastructure

Quotes

"You come after a critical infrastructure within our domestic space, it points back to you. We're going to have a conversation you're not going to like." - Matt Hayden on deterring attacks on critical infrastructure.

"Resilience means you have the ability to re-stand up infrastructure service to really work with your network and your users to where you still have the ability to operate." - Matt Hayden defining resilience.

"We would have the traditional sanctions methods...but it wasn't something that really imposed cost. And so looking at that model now, there is the need for playbooks that are strategic for each bad actor." - Matt Hayden on needing tailored deterrence strategies.

"You're saying I'll let you get away with X? Yeah, but not Y… And as [the bad actors] get worse, the deterrent gets stronger. You have to gradient [deterrence]." - Matt Hayden on deterrence gradient.

"The strength of America is that people want to be here for all the challenges you have. People would rather live here than anywhere else." - Matt Hayden on American innovation being a strength.

Resources Mentioned

National Security Memorandum 22

Bio Matt Hayden is a cybersecurity executive with over 20 years of experience spanning both the public and private sectors. He currently serves as VP for Cyber and emerging technology at CyIQ, fostering industry partnerships and driving growth strategies. Previously, Hayden held senior leadership roles at DHS, including serving as the Assistant Secretary for Cyber, Infrastructure, Risk, and Resilience Policy. In this position, he led policy development efforts focused on reducing national risks to critical infrastructure cybersecurity, federal networks, and comparing cybercrime. Hayden also served as a senior advisor with DHS's Cybersecurity and Infrastructure Security Agency and its Office of Partnership and Engagement. He is a Senior Fellow at the McCrary Institute.

Cyber Focus at RSAC 2024: Flashpoint CEO Josh Lefkowitz May 10, 2024

Show notes

Flashpoint CEO Josh Lefkowitz joins us for a fascinating talk about how 9/11 changed the trajectory of his career, the impact of Telegram worldwide and how A.I. is making human analysts better.

Cyber Focus at RSAC 2024: Alison King & Elisa Costante May 09, 2024

Show notes

On location at the RSA Conference 2024, we talk to Alison King and Elisa Costante about the National Security Memorandum on Critical Infrastructure Security and Resilience, the 2024 Report on Cybersecurity Posture of the United States, and creating opportunities for women in cyber.

Building Blocks of Cyber with Anjana Rajan May 08, 2024

Show notes

In this episode Frank Cilluffo sits down with Anjana Rajan, the Assistant National Cyber Director for technology security at the Office of the National Cyber Director in the White House. Their discussion sheds light on the challenges and complexities of reshaping the cybersecurity landscape with better buildings blocks. Together, they explore the White House's call for broader use of memory safe programming languages, and how her office is working with the private sector to find ways to eliminate entire categories of cyber vulnerabilities. ONCD Report - Back to the Building Blocks: A Path Toward Secure and Measurable Software

Our TOPPODCAST Picks

Follow Us

Stay Connected

Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure

Related Podcasts

Links

Stay Connected