2024-03-06 07:30:16
The National Security Agency (NSA), in “the interest of transparency,” publishes an annual activity report sharing information on its cybersecurity efforts. For the agency, China and Russia still remain major cyber threats. But she is worried about the development of AI and the arrival of quantum computing.
Since World War II, the NSA and its predecessors have protected the nation’s sensitive information. With the world’s growing interconnectedness and growing threats, the NSA’s mission has expanded. Today, it integrates cryptographic expertise, signals intelligence, vulnerability analysis and defensive operations to prevent and eradicate cyber threats.
In the United States, the national cybersecurity strategy emphasizes international partnerships to strengthen the security of software, critical infrastructure and global networks, while fighting ransomware, a real scourge that impacts the activity of many companies and administrations.
“The global landscape, with the advancement of technology, is becoming more complex, particularly with artificial intelligence which can disrupt several sectors simultaneously”notes the NSA in his report. The NSA comes to the same conclusions as everyone else: artificial intelligence (AI) is emerging as both a threat and an opportunity.
A spy virus active in 50 countries
“AI and machine learning technologies are growing rapidly, surpassing the ability of businesses and governments to shape standards and ensure positive outcomes. While these tools offer amazing defensive capabilities, they can also strengthen attackers”warns Rob Joyce, NSA director of cybersecurity and deputy national director for national security systems.
Another threat which is far from being a surprise in such a document: China. The country still remains a major cyber threat to the United States. In particular, the NSA has identified a Chinese state-sponsored cyber actor who uses specific tools to target US critical infrastructure. The agency also spotted sophisticated Russian cyberespionage malware called Snake. It would be active in more than 50 countries.
Expanding its capabilities, the NSA now leverages its unique information on nation-state cyberactivity. Its PDNS (Protective Domain Name System) service blocks access to malicious or suspicious websites. Using a custom threat feed, the NSA provides indicators of compromise (IOCs) weekly to its Domain Name System (DNS) filtering vendor to keep its blocklist up to date.
Finally, the agency is closely following the development of quantum computing. “When realized, a quantum computer relevant for cryptanalysis will be a game-changer. It will introduce threats to our nation’s most critical information systems and cryptographic systems that secure the Internet and information systems around the world.”we read in this report.
Quantum-resistant cryptography remains the best defense against this imminent threat. This is the reason why the National Security Memorandum is asking about 50 government agencies to migrate their vulnerable cryptographic systems to quantum-resistant cryptography as part of a multi-year effort.
“Implementing vetted, quantum-resistant cryptographic solutions across all of our systems won’t happen overnight, but it’s critical that we chart a path to get there, given the threat that computing poses quantum »said Rob Joyce.
Remember that post-quantum cryptography consists of developing and implementing new cryptographic systems capable of protecting against a possible quantum attack.
When the NSA buys personal data
In its report, the NSA mentions the transparency of its activities. But she is careful not to indicate that she acts like any marketing department of a company! It buys Americans’ navigation data from commercial data brokers. And, of course, without a warrant! These purchases include information about the websites Americans visit and the applications they use. This information was revealed by intelligence officials in documents released by a US senator. The objective of these purchases is to better identify cyber threats. In 2021, the Defense Intelligence Agency purchased smartphone location data, also without a warrant.
1709712273
#NSA #preparing #quantum #computing