Pete Russo, Senior Marketing Manager, BT Global Services

So, what’s all the hype in the security industry? With the increased importance of securing our nation’s cyber infrastructure, BT’s Bruce Schneier was recently interviewed by Elinor Mills of CNET News to discuss the FUD and hype associated with the security industry. As always, Schneier’s opinions and critical eye are a no-nonsense reality check for the industry.

The SecureThinking group wanted to take this opportunity to point out three critical questions Mills asked regarding vulnerability, smart grid and the importance of cybersecurity as a national priority and the interesting thoughts provided by Schneier during the interview:

• Mills: Does it seem to you like our critical infrastructure, government, and corporate networks are just as vulnerable to attack as they were 15 or 20 years ago? Are we making any progress in that area? Schneier: If anything, they’re more vulnerable because there’s more of it and it’s more critical. We’re making some progress against specific attack tactics, but I don’t think we’re making any real progress overall against the broad threats. Cybercrime is still getting worse.

• Mills: Do you think the smart grid will be secure or just offer more ways for attackers to disrupt things?
  Schneier: “Secure” isn’t an absolute; there’s just more secure and less secure. I think the smart grid will be more secure than some of the older systems it will replace, but less secure than others. It will defend against some attacks, and some accidents, and it will certainly offer attackers additional ways to disrupt things. This doesn’t mean it isn’t a good idea, mind you. Security considerations are just one of the things that should influence the decision to implement a smart grid.

• Mills: How much of a priority should cybersecurity be, if at all?
  Schneier: It should be a major priority. More and more of society – government, corporate, and personal – is in cyberspace. Cyberspace is now where you go if you want to steal money, engage in espionage, or disrupt corporate and government operations. The real world is still more important, but cyberspace is increasingly important.

We’d love to hear your thoughts on Schneier’s comments. How vulnerable is this country to a major cyber attack? Is smart grid a good idea? And, what are the security and other considerations that should influence the decision to implement a smart grid?