David Hogue, Technical Director, Cybersecurity Threat Operations Center, National Security Agency, oversees the cyber defense of DoD’s unclassified network that affects 3 million+ users across the globe. At the recent Billington International Cybersecurity Summit, Hogue offered 4 ways that innovation could help advance cybersecurity.
1. Policy: Hogue noted that Russia and China require companies that want to do business in their countries to give the government access to private data and source code. “Rather than resorting to cyber theft, they have another means. We have to be aggressive in the embrace of policy.” to p
A second policy initiative Hogue applauded was the creation of the UK’s National Cyber Security Centre—a one-stop shop for both governments and the private sector.
2. Artificial Intelligence and Machine Learning: Machine learning will be able to “outpace the threat” environment. By automating the basic blocking and tackling, machine learning will allow the humans to perform for more specialized tasks.
3. Bug Bounty programs: Hogue called Bug Bounty programs “an amazing, proactive, economical means to find vulnerabilities that were previously unknown.” The first Bug Bounty program at DoD saved $1 million. The savings do not take into account the damage and cost if the vulnerabilities found had been exploited, he added.
4. Non-traditional recruitment of cybersecurity staff: Seek staff for their individual problem-solving skills and aptitude rather than only looking at people with a STEM background, he recommended.
A video of Hogue’s talk is here.