2016 MIT Information and Communication Technologies Conference
Hardly a week goes by without a report about another cyberattack. With almost every major organization having been victim, including most government organizations, such Target, Sony, NSA, US Office of Personnel Management, why would you expect your organization to be immune? By many projections, the worse is yet to come. Although much progress is being made in improving hardware and software, studies have reported that between 50-70% of all cyberattacks are aided or abetted by insiders (usually unintentionally), so understanding the cybersecurity governance and organizational culture is increasingly important. In this session, we will discuss the managerial, organizational, and strategic aspects of cybersecurity with an emphasis on the protection of the nation's critical infrastructure.
Encryption as a means of data control (privacy and security):
For a long time, interaction on Web has been less private or secure than many end-users expect and prefer. Now, however, the widespread deployment of encryption helps us to change that.
* Making encryption widespread. For years we have known how to do encryption, but it wasn't widely used, because it wasn't part of overall system design. In response, particularly as we've become aware of capabilities for network-scale monitoring, standards groups including IETF and W3C have worked to encrypt more of those network connections at the protocol and API-design phase, and to make it easier to deploy and use encrypted protocols such as HTTPS. Encryption won't necessarily stop a targeted attack (attackers can often break end-user systems where they can't brute-force break the encryption), but it raises the effort required for surveillance and forces transparency on other network participants who want to see or shape traffic.
* Secure authentication. Too many of our "secure" communications are protected by weak password mechanisms, leaving users open to password database breaches and phishing attacks. Strong new authentication mechanisms, being worked on for web-wide standards, can replace the password; helping users and applications to secure accounts more effectively. Strong secure authentication will enable users to manage their personal interactions and data privacy, as well as securing commercial data exchange.