[cap-talk] [securitymetrics] CSIS report is published

[Karp, Alan H]

I found this report interesting.  I thought you might, too.

--------------------------------

To: discuss at securitymetrics.org
Subject: [securitymetrics] CSIS report is published

Commission on Cyber Security for 44th Presidency published its final report:
http://www.csis.org/media/csis/pubs/081208_securingcyberspace_44.pdf.

There is a good chance that this report will significantly influence US government actions -- organization changes, regulations, laws, purchasing, and R&D funding.  On page 81 is a paragraph recommending federal funding of R&D for metrics and risk measurement to support better investment decision-making.  The only other specific area of R&D mentioned was "re-architecting the Internet".  For lack of established, compelling metrics and associated incentive systems, the rest of the report emphasizes regulatory solutions rather than market-based solutions.

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
http://www.hpl.hp.com/personal/Alan_Karp