Rasch added that the private sector needs to play a bigger part in creating a truly operational and efficient information sharing program. Most CIOs are loath to share even non-identifiable data about attacks on or vulnerabilities in their networks, for fear that the information will be used either by competitors or other crackers to do further damage to the company. Until this changes, neither the government nor industry will be able to do much to improve the view they have of whats happening on the Internet. But some in the industry believe the government has made gains in this area and is moving in the right direction. "I think were making progress with information sharing compared to where we were a year or two ago," said Chris Klaus, founder and CTO of Internet Security Systems Inc., in Atlanta, which runs the information technology industrys ISAC (Information Sharing and Analysis Center). "Were actually getting information that in the end will protect consumers."Klaus said this should be at the top of the governments list. "More money for research would definitely benefit everyone," he said. "I fully believe that we created the Internet, and we can secure it. It hasnt been a big enough priority with the government. Its not a technology issue." Executives attending the summit will address a variety of other subjects in addition to the national strategy. Five task forces will tackle individual problems: security awareness for home users and small businesses; early warning systems; corporate governance; technical standards and Common Criteria; and security across the software development life cycle. The groups are set to deliver reports Wednesday afternoon and will meet periodically to continue to work on these issues. Discuss This in the eWEEK Forum
Among other things, Yoran is expected to lay out a list of priorities for the government in terms of both funding and operations. Among the top-line items is likely to be putting more money toward research and development of advanced security technologies and improvements for existing systems.