3 ms·
> When there's a ransomware attack or data exfiltration, nobody says, 'where's the FBI?'. Every IRP (Incident Response Plan) that I have seen had contact info
by vuln 4y ago
> When there's a ransomware attack or data exfiltration, nobody says, 'where's the FBI?'.
Every IRP (Incident Response Plan) that I have seen had contact information for the local FBI office and typically the names and emails of a couple of agents. While the security folks or leadership had already at least had an intro convo. Now this is typically large companies, mom and pop diner that uses a few work stations would probably call their _IT_ guy who would probably wipe and reinstall.
Multiple tens of TTX (Table Top Exercises) direct and or lead the security team / participants to report to local authorities, typically FBI.
- wolverine876 4y agoI'm not saying there's no FBI involvement; I'm saying they don't delivery security and for some reason nobody expects them to do so. If there is a rash of bank robberies or terrorist activity we expect performance from the FBI. If there is rash of criminal activity on the Internet, we expect the FBI to help out but don't expect actual security. The FBI or DOJ need an electronic infrastructure enforcement division (I despise the sci-fi term 'cyber').
- vuln 4y agoHow would that work exactly? How would the FBI protect infrastructure and which infrastructure? Should it be at the ISP? Should the FBI give every business a black box and say "put this between the internet and your network, we'll monitor and defend against cyber criminals" but if the company did that they would be giving the FBI all of their inbound and outbound traffic.I guess you could use the _nothing to hide_ argument but that's ridiculous. If we put the onus of security on the FBI/Government that just means a larger government and less rights. Take the PATRIOT Act for example.