Agency Chief Tasked With Protecting Government Networks From Cyber Attacks Resigns

The chief of the agency tasked with shielding U.S. government networks from cyber attacks has stepped down following a string of embarrassing data breaches by hackers.

Randy Vickers, head of the U.S. Computer Emergency Readiness Team, resigned Friday, according to an email obtained by The Huffington Post.

Lee Rock, the deputy director for US-CERT, will serve as interim acting director of the agency, which serves as the cybersecurity arm of the Department of Homeland Security.

"We are confident that our organization will continue its strong performance under his leadership," according to the email from Roberta Stempfley, acting assistant secretary for cybersecurity and communications.

Vickers' resignation comes as the Obama administration proposes giving DHS greater oversight over computer networks in both the public and private sector and as hackers continue to expose widespread gaps in government cybersecurity.

Cyber attacks against federal government networks spiked about 40 percent last year, from about 30,000 in 2009 to nearly 42,000 in 2010, according to a report this spring by the Office of Management and Budget.

US-CERT is also tasked with reporting cyber threats against federal computer systems that use the .gov domain.

In June, the hacker group LulzSec took credit for bringing down the home page of the Central Intelligence Agency and hacking the network of an Atlanta-based FBI affiliate.

"It is pretty big news because Randy set the vision [of government cybersecurity] for quite awhile," said Anup Ghosh, a former Pentagon cyber scientist and founder of the cybersecurity firm Invincea Inc.

But under his leadership, hacker groups have "made a public mockery" of government networks, Ghosh said. "A lot of us are wondering now what's going on and how they are going to fill his shoes."

Comments

[danusgram]

09:35 PM on 07/26/2011

Well it is about time. We have a wealth of talent that could be used to protect national security if we gave these young people an incentive to go into network security the same way we provide financial aid and services to those that join the armed military.
Why is there not an initiative to train young people to do that. I see it as a win for the country to extend the armed services to include a new military division that protects the country in virtual worlds on the internet! Give these people the same military benefits for protecting the country! This new military division could also train people to take over airport security.

[HonestGoingForward]

07:51 PM on 07/26/2011

It's not like Anon and LulzSec didn't tell them they were coming. "Expect us" is in their motto, it was only a matter of time.

[Phemale]

05:23 PM on 07/26/2011

• F•Bee•Eye Targets 12 In K0©h Industries Online A.$$.ault •
http://www.thesmokinggun.com/documents/koch-industries-ddos-attack-875410

• Journalism student faces 15 years for alleged ‘An0nym0us’ h^ckt1vizm •
http://www.rawstory.com/rs/2011/07/25/journalism-student-faces-15-years-for-alleged-anonymous-hacktivism/

[Warren Anderson Jr]

10:47 AM on 07/26/2011

42,000 attacks in the last year? Taking the trouble to tinker with the CIA and the FBI? -- amazing, disturbing and very sad. Geez.....

[Shawn Kelloway]

10:44 AM on 07/26/2011

The whole post sounds kind of ridonkulous since cyber security doesn't really exist. Given the diversity of programming languages, lack of standardization in programming, differing hardware protocols, and the use of various incompatible hardware used to create networks; any network can get hacked, eventually. No absolute system or method of encryption exists to provide actual protection.

You obviously need someone to combat online security incursions but firing someone just cause you got hacked doesn't sound fair or acceptable. Unless this person demonstrated serious ineptitude or ability, and I assume once you get to the level this guy got, you don't fire them.

The speed and efficiency of a response to incursion really defines the skill of any security officer. The CIA represents a high-level target for hackers and having someone skillful enough to respond efficiently to an attack is key. You don't fire a security officer cause the bank got robbed. The bank was going to get robbed regardless. Besides, the presence of security is , more often than not, used a deterrent. Security rarely takes any real action.

[eric14]

04:12 PM on 07/26/2011

In rapidly changing situations, firing head honcho is the quickest way of changing direction of an institution.

[Shawn Kelloway]

04:55 PM on 07/26/2011

I think you missed the point. Since so many other factors put the entire system at risk and vulnerabilities will eventually get uncovered, it is best to limit the ideological scope to ensure better security. Granted the world of online security tech rapidly changes but Randy Vickers set the pace for many years and they replaced him with his deputy so there won't be very much of a pragmatic shift.

Firing the head honcho might expedite a PERCEIVED change in direction but I find, more often than not, that actual change always happens over a much long period of time. In this instance I think it is best to "stay the course" and hire new blood which can incorporate new methods into an already established system, under the direction of the one person who knows that system best, Randy Vickers.

[ManwithaParachute]

01:35 PM on 07/27/2011

Cyber Security is more prevention than reaction to the event in progress. Using decoys to separate the weak threats from the strong. Utilizing the same tactics the hackers use to cloak themselves to cloak the point of entry, several layers of isolation between protected data and the outside world with strict adherence to isolating functionaries who would traverse this divide. External security is often breached by breaches in internal security. Over dependence on outside vendors.....

[Coyote Longfall]

09:30 AM on 07/26/2011

The fact is that the government is trying to play a losing game. The world has changed, and keeping secrets just isn't possible in the same way that it was. The government is trying to protect its dirty secrets by building sand castles around them and all the while, the tide is coming in. Transparent government, and an end to the culture of secrecy is inevitable. Policy changes, financially, in foreign policy, and in domestic affairs will ease the transition, but I have no illusions that that is the way it will happen. Government and big business will fight openness that continues to grow up all around them, until they become irrelevant.

Open source software and hardware, micro-economies using locally produced goods, peer-supported products, and a transformation in the discussion about intellectual property are all part of the growing culture of openness. It's already happening, and it's too late to stop it.

Fight the vast machine!
Peace,
Coyote

[sillyfrog]

09:15 AM on 07/26/2011

Maybe she/he was a smart mouthed know it all boss and her servants got tired of it?

[realitytrumpsbull]

08:32 AM on 07/26/2011

Well, how do we know that these hacker groups don't get money 'under the table' from The Government to keep playing these stupid little online games, or whatever? You'd think that as smart as all these people are supposed to be, that it'd be dang difficult for any hacker to really do any kind of 'stuff' anymore, let alone even connect to the Government Network, given the length of time that people have known about hacking.  Maybe the guy picked the wrong antivirus software, or something like that?   When your favorite car company starts building lemons, sometimes, ya gotta switch...

Maybe networking will be reinvented to the point where a normal computer just won't work on the govt. service at all...and if you tried, it'll make your CD-ROM go shooting across the room or something, or just 'brick' the mainboard. Big flashing lights, disconnect NOW, or your computer will become a paperweight in 5, 4, 3, 2, 1...or, maybe they'll figure out that good ol' pen n paper really still work pretty good, and typewriters have keyboards, too.  Once Upon A Time, DARPA invented the internet. You'd think that the people that invented something would know how to keep people from breaking (into) it...? There's always 'off'...

[dtmfman]

07:08 AM on 07/26/2011

here's a clue...the ONLY way to protect yourself from cyber attacks...is to disconnect...

this has been a public service announcement.

[memphis360]

08:10 AM on 07/26/2011

LoL!!! Now that is what i call sound advice...

[PenguinLinux]

01:37 PM on 07/26/2011

Well, you would stop data created BY you by doing that; yes, of course.... however, disconnecting from the Internet would not stop data from being created ABOUT you by other people and companies. Someone could still get that information and wreck havoc in your life.

[danusgram]

09:38 PM on 07/26/2011

Thank you fellow Linux fan ....they no not what they speak......lol...

[Roci]

06:32 AM on 07/26/2011

This is what we get for buying bean counters to watch over our Cyber-sec. What we ought to do (I'm going to pretend that this isn't being done already, just for the sake of argument) is go out and do what China and other people who don't like us do already. They hire hackers, give them the best (including an offer to keep breathing) and let them do their thing.
So should we. This problem is being "handled"on our side like every other "Beltway" problem. They toss a wad of money at it, set up a government structure, and put on the appearance (for funding's sake) that the problem is in hand. Then we get our electronic pants taken down, and all the expensive window dressing in Washington doesn't matter anymore. You want a definition of real gutsy "trench warfare in the "age of terrorism? " It's going on in cyberspace. Our enemies are wearing Kevlar. We're wearing a tutu and ballet slippers. Who's your money on?

[BusterCluster]

05:56 AM on 07/26/2011

Hacker Moto:-be hidden, be silent, listen and don’t get DOX (documented-revealed).
Script Kiddies (also hackers) Moto:- Let’s do it, we won’t get caught, let’s tell the world what we done..yeh..me…me…me..me
These hackers know cyber space. There are some that are young and audacious. Look at Anonymous or AntiSec the authorities have arrested some hackers but they are only foot soldiers. Cyber Space is full of foot soldiers. These young hackers are very gifted and talented.

Wake up these hackers are our sons and daughter. They are the focused ones the ones that could lock in with laser eyes what they wanted. Remember that nerd you picked on back in school well he just hacked the IMF. Now he has powers and she has friends that think alike and where treated alike, with their own slant on Peace and War and especially on what’s wrong and right. Guess what they are our future – were we good parents? That’s who these hackers are.

They have tricked you! Mis/disinformation.

These hackers know social media they grew up in this technology. Social Engineering it’s second nature, their bread and butter they are hackers.
They use these PUBLIC tools to taunt us. To give us clues to put out but to divulge any real information – sometimes.
I do admit that they are young and brazen so they kind of show their metal and that’s when the clues really become clear.

uscyberlabs.com/blog

[factsaboutchina]

04:36 AM on 07/26/2011

Instead of spending 3 trillion in 3 wars over the last 10 years the US could have spent 3 trillion on building a cyber fortress, as well as working to bring down other nation's firewalls & making the internet a transparent tool for projecting American soft power.

[netzwerg]

10:49 AM on 07/26/2011

That's what China did, I mean invest in cyber fortress and take down other countries firewalls.

[factsaboutchina]

09:47 PM on 07/26/2011

Exactly.

There is no reason that the US isn't taking down the Great Fire Wall of China. Turing off the Chinese power grid. Using Suxtrex like viruses to wreck havoc on their banking systems. Publishing personal information of the Chinese communist leaders for the Chinese citizens to see and read. And just general cyber sabotage against the Chinese.

[AmericaninIndia]

03:46 AM on 07/26/2011

I'm trying to find the Web site for "Backdoor Beauties in the Health and Human Services Office"....I could have sworn that was up yesterday. Rumor has it that the Chinese hosted it for civil servants and infiltrated their network via video download.

[johnb123]

01:58 AM on 07/26/2011

If the government employees would just stop surfing the po_rn sites, that would really help.

[vippy]

09:40 AM on 07/26/2011

I don't see how this is being done since certain things are blocked by the administration. I can't get on Facebook with the company's computer, just one example.

[Patroclus]

01:50 AM on 07/26/2011

Cyberwarfare is a reality, but not a new one. There is now good evidence that the Ohio presidential ballot in 2004 was hacked so that G. W. Bush could carry Ohio and win the WH.

http://www.truth-out.org/new-court-filing-reveals-how-2004-ohio-presidential-election-was-hacked/1311603015

[Thomas Alan]

08:37 AM on 07/26/2011

that site is a truther propaganda site, and is as much a legitimate news source as a tabloid.

[Patroclus]

02:01 PM on 07/26/2011

Actually, it is a progressive site. Regardless, the article is about a suit brought in court and thus lists the imprecations of the suit independent of the bias of the reporter.

[vippy]

09:41 AM on 07/26/2011

I googled the Ohion Papers on election day and more than 90% were against Bush and then he won. Later I read where many were prosecuted for voter violations, etc. but it was too late to recall Bush. I know our elections are rigged, we saw it twice now!