La marina de los EEUU ha llevado incorrectamente la seguridad cibern\u00e9tica durante a\u00f1os y ahora est\u00e1 trabajando en un nuevo enfoque que se adapte mejor al entorno contempor\u00e1neo, dijo el director de informaci\u00f3n del servicio. El personal militar fue objeto de ciberataques en medio de las conflictivas relaciones chino-estadounidenses y la invasi\u00f3n rusa de Ucrania. Al parecer, el enfoque por listas de control ya no es efectivo ante las nuevas amenazas.<\/p>\n
NATIONAL HARBOR, Md. \u2014 The U.S. Navy has framed cybersecurity incorrectly for years and is now chipping away at a new approach that better suits the contemporary environment, the service\u2019s chief information officer said Tuesday.<\/p>\n
\u201cI have made the assertion now, publicly, multiple times. You may have heard me say it. But I believe that the way that we view cybersecurity in the Department of Navy is wrong,\u201d Aaron Weis said at the\u00a0Sea-Air-Space conference<\/a>. \u201cWe view cybersecurity as a compliance problem, and it is most definitely not a compliance problem.\u201d<\/p>\n Instead, Weis explained, cybersecurity should be treated like the broader concept of military readiness. A more holistic lens would emphasize active cyber management \u2014 considering a range of factors \u2014 and could inch away from red tape, audits and boxes that need checking. Essentially, traditional assessments of equipment, logistics, training and personnel, among other things, could find their equal in\u00a0the digital domain<\/a>.<\/p>\n \u201cWe have 15 years of track record that proves that the current approach to cybersecurity, driven by a checklist mentality, is wrong,\u201d Weis said. \u201cIt doesn\u2019t work.\u201d<\/p>\n Sailors and other military officials\u00a0were warned in February<\/a>\u00a0they were targets for cyberattacks amid troubled Sino-U.S. relations and Russia\u2019s invasion of Ukraine.<\/p>\n \u201cCyberattacks against businesses and U.S. infrastructure are increasing in frequency and complexity,\u201d Navy Vice Adm. Jeffrey Trussler said in an unclassified memo at the time. \u201c[Department of Defense] and federal law enforcement report adversary interest in our remote work infrastructure. This means that you are a target \u2014 for your access and your information.\u201d<\/p>\n Hackers previously exploited mistakes on Navy and private networks by stealing or brute-forcing credentials as well as surreptitiously installing malware, according to the memo. Defense News in June 2018 reported\u00a0Chinese-sponsored cyberattacks<\/a>\u00a0breached a Navy contractor\u2019s computers, jeopardizing sensitive data related to secret work on an anti-ship missile.<\/p>\n \u201cWith heightened tensions throughout the world,\u201d Trussler said in his February missive, \u201censure your team understands how the actions of a single user can impact our global force.\u201d<\/p>\n