M anhattan Cyber Project Safeguarding Corporate America and the National Information Infrastructure August 19 1997 Overview Contents M anhattan Cyber Project Project Origin Challenges Mission Statement Tasks Target Audience Schedule Organization Management Team Outreach Events War Room Facility Proposed Outreach Topics Outreach Team Criteria Government Participation CYREC™ Security in Cyberspace Summit Anticipated Outcome More Information Refer to http www WarRoomResearch com MCP for updated information 2 Project Origin M anhattan Cyber Project Outgrowth of 1996 Information Systems Security Survey – conducted in cooperation with the U S Senate’s Permanent Subcommittee on Investigations and – anonymity protected sources and proprietary information Revealed startling findings on admitted security threats and vulnerabilities to Fortune 1000 corporations and elements of the National Information Infrastructure to include – 47% response rate 205 firms qualified – 119 58% detected intrusions 25 12% did not and 61 30% didn’t know – 98 82% successful intrusions from the 119 that detected – 129 63% of 205 firms caught insiders misusing systems – 67 41% had losses per outsider incident over $ 500 000 and – probing scanning compromise email documents and introduced virus most frequent Refer to http www WarRoomResearch com MCP for updated information 3 Project Origin cont M anhattan Cyber Project Ms Jamie Gorelick former Deputy Attorney General Department of Justice during testimony in Senator Sam Nunn’s hearings on Security in Cyberspace – stressed urgency to form a public private partnership to address the cyber threat” – must engage the best and the brightest in industry government and academia – likened the desired approach to the historic Manhattan Project and – focus on public awareness and sharing of expert knowledge Manhattan Cyber Project formed in early May 1997 with a Management Team representing industry and academia U S Government jumped on board in Aug 1997 based on discussions and negotiations that began in Dec 1996 Refer to http www WarRoomResearch com MCP for updated information 4 Challenges M anhattan Cyber Project Despite government and private industry studies and pronouncements warnings about lack of security in cyberspace and risk of an electronic “Pearl Harbor” are largely unheeded People are uninformed confused and skeptical regarding government goals expectations initiatives and methodologies Lack of reporting and documentation on cyber attacks obscures what is really happening Broad range of dynamic threats and vulnerabilities -- Information Warfare threat is generally unknown No uniform method available for measuring value of data information and selecting appropriate safeguards Refer to http www WarRoomResearch com MCP for updated information 5 Mission Statement M anhattan Cyber Project Improve on the availability and effectiveness of people technology and processes that safeguard corporate America and critical infrastructure areas from the “cyber threat ” – PEOPLE training education and collaborative forums – TECHNOLOGY firewalls filtering routers network management intrusion detection authentication digital signatures etc – PROCESSES requirements configuration management quality assurance etc Accomplish this mission by developing and facilitating a coordinated “outreach” program with industry government and academia Refer to http www WarRoomResearch com MCP for updated information 6 Mission cont M anhattan Cyber Project Focus outreach on education awareness and some best practices Key elements of the outreach program involve – providing learning materials on threats vulnerabilities and security safeguards – gathering of quantitative and qualitative data information enhancing the understanding and benchmarking of the cyber threat – furnishing of collected information to industry government and academic groups as well as the general public and – laying the foundation for the nonprofit Cyberspace Research Education Center CYREC™ to continue the work pioneered by the Manhattan Cyber Project Empower stakeholders and the general public to be “situationally aware” and address the cyber threat Refer to http www WarRoomResearch com MCP for updated information 7 Tasks M anhattan Cyber Project Develop informative and unbiased outreach materials for the target audience that does NOT focus on individual solutions Foster collaborative self-directed Outreach Teams to present materials to the target audience Initially examine the effects of the cyber threat on the critical infrastructure areas of – – – – – – – – telecommunications electrical power systems gas and oil transport and storage banking and finance transportation water supply systems emergency services and vital government services Refer to http www WarRoomResearch com MCP for updated information 8 Tasks cont M anhattan Cyber Project Gather essential elements of cyber threat information by – conducting robust scientific surveys and interviews – installing pilot intrusion detection and traffic analysis systems in multiple industries – monitoring and tracking “open source” data information on emerging threats and vulnerabilities and – analyzing data information on the present state of security Identify a cyber threat baseline segmented by industry threat and vulnerability Present special summary of findings to the legislative branch on critical infrastructure protection and corporate competitiveness Establish the nonprofit CYREC™ as a shared resource and collaborative work environment Conduct a Security in Cyberspace Summit Refer to http www WarRoomResearch com MCP for updated information 9 Target Audience M anhattan Cyber Project CEO’s CIO’s CFO’s CKO’s CTO’s -- owners and operators of critical infrastructure areas Senior managers of state and local governments Law enforcement agencies Information security personnel Physical security personnel Business continuity personnel Strategic planners General public Kids and young adults Refer to http www WarRoomResearch com MCP for updated information 10 Schedule M anhattan Cyber Project Manhattan Cyber Project initiated in early May 1997 Follow-up press announcement in Aug 1997 to announce updated Management Team and Outreach Team members government coordination and event schedule Outreach events held from Jun to Dec 1997 Establish CYREC™ in late 1997 with limited operations underway in Jan 1998 Security in Cyberspace Summit to be held in Feb 1998 Refer to http www WarRoomResearch com MCP for updated information 11 Organization M anhattan Cyber Project Creative collaboration of leaders assembled to address challenges WarRoom Research handles day-to-day administration as Project Coordinator Infrastructure Protection Task Force proposed to handle government coordination as a Participating Advisor Management Team assists in planning and overseeing project implementation Sponsors provide equipment services etc Outreach Teams provide educational programs and collect survey and other data information -- estimated at 125 organizations Refer to http www WarRoomResearch com MCP for updated information 12 Operational Structure M anhattan Cyber Project P roject C oordin ator W arR oom R esearch L L C P articipatin g A dvisor IP TF U S G overn m en t S peakers F ederal S tate an d local M an agem en t Team C ross-In du stry G rou ps S pon sors E qu ipm en t services etc O u treach Team s U S In tern ation al O u treach E ven ts S ecu rity in C yberspace S u m m it Refer to http www WarRoomResearch com MCP for updated information 13 Management Team Sponsors M anhattan Cyber Project Refer to http www WarRoomResearch com MCP for updated information 14 Outreach Events M anhattan Cyber Project Employ an extended security awareness outreach program that affects industry and government alike Vehicle is an Outreach Team U S and International comprised of noted executives practitioners academics and other professionals from diverse disciplines Appearances include conferences trade association meetings online sessions and special events -- estimated at 30 to 40 internationally Themes or topics will vary and include an informative lecture seminar workshop and hands-on demonstration -- war room Security surveys and interviews will be conducted and later analyzed by various indicators -- war room Team members are under Manhattan Cyber Project aegis -project logo displayed with respective organizational logos Refer to http www WarRoomResearch com MCP for updated information 15 War Room Facility M anhattan Cyber Project Monitor and track project activities Demonstrate and visualize cyber threat scenarios by – displaying the critical junctures which vulnerabilities and threats exist to information and telecommunication systems and – modeling cybercrime incidents and develop situational alarms Maintain an executive action issues management status board for an immediate team response Coordinate cybercrime incidents with law enforcement -- option for anonymous reporting if desired Link to portable war rooms used by Outreach Teams at events and “hands on” demonstrations Refer to http www WarRoomResearch com MCP for updated information 16 Proposed Outreach Topics M anhattan Cyber Project Access Control Antivirus Malicious Logic Applications Program Security Business Continuity Planning Competitive Intelligence Computer and System Security Computer Emergency Response Team CERT Cryptography Data Classification Electronic Commerce Enterprise Security Financial Crimes Firewalls Virtual Private Networks Refer to http www WarRoomResearch com MCP for updated information Information Ethics Information Warfare Internet Security Investigations Computer Forensics Legal Regulatory Issues Operations Security Organization Architecture Policy Development Risk Assessment Management Security Awareness Telecommunications Security Year 2000 Youth Programs 17 Outreach Team Criteria M anhattan Cyber Project Candidates are selected on a first-come-first-serve basis and must be majority approved by the Management Team Choose U S Team or International Team -- based on organization's ownership Satisfy ONE of the following resource areas – provide a leading edge technology or process that can help mitigate the cyber threat – offer knowledge on a recognized quality security program and how to implement it successfully – demonstrate adverse effects of the cyber threat either in terms of security or competitiveness or – share some “sanitized” data relating to intrusions and penetrations that can be added to the project’s database Select a topic or theme that reflects the expertise and knowledge of the organization -- create one if not found Refer to http www WarRoomResearch com MCP for updated information 18 Outreach Team Criteria cont M anhattan Cyber Project Choose to lead a single team and or participate on single or multiple teams under the selected topic Assist the chosen team on developing 2-3 products such as seminars interviews articles data collection analysis etc Develop a presentation for Security in Cyberspace Summit to include research papers hands-on demonstrations informative workshops etc Share in the project's development by contributing some degree of funding value determined by candidate -- small business and academia excluded Agree NOT to market products or services while under the aegis of the Manhattan Cyber Project -- consequence is immediate removal from project Refer to http www WarRoomResearch com MCP for updated information 19 Government Participation M anhattan Cyber Project Government contact is the Infrastructure Protection Task Force created by Presidential Executive Order 13010 Jul 15 1996 Act as a Participating Advisor to the project’s Management Team and coordinate government involvement Important and unique undertaking requiring many policy and legal reviews -- began in Dec 1996 Core IPTF talent is reflective of what government can bring to bear against the cyber threat -- real world threat briefings and liaison to law enforcement and other entities More information on the IPTF is available on the Internet at http www fbi gov Refer to http www WarRoomResearch com MCP for updated information 20 IPTF Members M anhattan Cyber Project IPTF member agencies include – – – – – – – – – – – – Federal Bureau of Investigation Chair Department of Defense Defense Information Systems Agency National Security Agency Central Intelligence Agency National Communication Systems Department of Energy Department of Justice Department of Transportation Department of Treasury National Institute of Standards Technology and Federal Emergency Management Agency Refer to http www WarRoomResearch com MCP for updated information 21 IPTF Disclaimer M anhattan Cyber Project Nothing in this briefing is intended to establish or imply the existence of any contractual relationship between WarRoom Research LLC WRR and the Infrastructure Protection Task Force IPTF The role of the IPTF will at all times be limited to the facilitative functions enumerated in Executive Order 13010 and IPTF conduct will be governed by that Order and other applicable federal authority Similarly nothing in this briefing is intended to imply that IPTF’s participation in this project constitutes an endorsement by IPTF of any commercial product or service offered by WRR or any other participant in this project The IPTF does not necessarily endorse the opinions of WRR and access to the IPTF is not limited to WRR or participants in the Manhattan Cyber Project initiative Refer to http www WarRoomResearch com MCP for updated information 22 CYREC™ M anhattan Cyber Project Provide on-going organizational support to continue the work pioneered by the Manhattan Cyber Project To be formed in late 1997 as a nonprofit education center to address the cyber threat and related cyberspace issues Shared resource amongst industry government and academia Operations limited to core education and research areas until infrastructure is established in 2nd Quarter 1998 to kick-off CERT and other operational activities CYREC™ membership opened 2nd Quarter 1998 to nonManhattan Cyber Project participants Relevant Outreach Teams under the Manhattan Cyber Project will be offered corresponding CYREC™ positions Refer to http www WarRoomResearch com MCP for updated information 23 CYREC™ continued M anhattan Cyber Project Objectives of this nonprofit center include – sponsor technical and educational programs on a variety of cyberspace issues – develop an accessible clearinghouse for open source data information on the cyber threats and vulnerabilities – offer CERT services incorporating a confidential reporting mechanism for high risk profiles – foster emerging technologies and best practices – outsource center activities such as research projects and technology transfer initiatives cycled to ensure objectivity – establish a backbone security team to counter cyber threats to corporate America and critical infrastructure areas and – become a reliable source for expert opinion and testimony available to government law enforcement and industry Refer to http www WarRoomResearch com MCP for updated information 24 Security in Cyberspace Summit M anhattan Cyber Project Occurs as the last outreach event in Feb 1998 Three day invitation only program Leaders from industry government and academia will identify and develop sessions as well as chair positions Objectives are – create a forum in which to analyze and present the findings of Manhattan Cyber Project – designed for both business and technical mindsets – review the mission of CYREC™ and its management structure to include how government can actively participate and – establish a semi-annual private retreat for decision-makers to plan for future collaborations Press conference held on final day to release findings to the public and announce next steps Refer to http www WarRoomResearch com MCP for updated information 25 Anticipated Outcome M anhattan Cyber Project Educate owners and operators of critical infrastructure areas and the general public to the cyber threat Empower stakeholders through available and effective solutions -technology people and processes Raise the bar of pragmatic security to a higher level through realistic expectations of products and services Enhance cooperation and understanding between industry government and academia -- sharing of data information Provide a shared resource in CYREC™ for continued collaborations to engage the cyber threat Refer to http www WarRoomResearch com MCP for updated information 26 More Information M anhattan Cyber Project Mark Gembicki Project Coordinator for the Manhattan Cyber Project Cofounder Executive Vice President WarRoom Research LLC 1134 Veranda Court Baltimore MD 21226-2211 USA 1 410-437-1110 1 410-437-1118 fax info@WarRoomResearch com http www WarRoomResearch com Refer to http www WarRoomResearch com MCP for updated information 27