[ISN] NSA product accreditations lag behind IT security advances

From: InfoSec News <alerts_at_private>
Date: Thu, 16 Sep 2010 00:50:17 -0500 (CDT)
http://www.networkworld.com/news/2010/091510-nsa-accreditations.html

By Ellen Messmer
Network World
September 15, 2010

ORLANDO -- The National Security Agency wants to use commercially-built 
security products and the latest virtualization software. But the slow 
pace of getting products certified through NSA channels and the 
lightening fast pace of change in the IT industry is causing 
national-security heartburn.

The high-tech spy agency, which also guides Defense Department 
information security, has become an enthusiastic proponent of open 
standards-based technologies such as Trusted Network Connect (TNC) and 
Trusted Platform Module (TPM) put forward by the organization Trusted 
Computing Group (which announced it expects to propose an end-to-end 
security framework for cloud computing around year-end).

This week the secretive NSA held its first conference related to its 
views on trusted computing. The NSA Trusted Computing Conference and 
Exposition in Orlando drew about 500 attendees and 39 exhibiting 
companies.

Michael Lamont, NSA chief of the network solutions office, noted in his 
keynote that since May of this year the national-security strategy has 
been "COTS [commercial off the shelf] first, not GOTS [government]."

[...]


_______________________________________________________      
Subscribe to InfoSec News - www.infosecnews.org
http://www.infosecnews.org/mailman/listinfo/isn
Received on Wed Sep 15 2010 - 22:50:17 PDT

This archive was generated by hypermail 2.2.0 : Wed Sep 15 2010 - 22:58:28 PDT