http://blogs.technet.com/b/security/archive/2010/05/03/scott-charney-deconstructing-cyber-threat.aspxToday, I would like to call your attention to a new paper from Microsoft Corporate Vice President for Trustworthy Computing Scott Charney called “ Rethinking the Cyber Threat – A Framework and Path Forward .” In my own opinion, this is a very importanten-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)http://blogs.technet.com/b/security/archive/2010/05/03/scott-charney-deconstructing-cyber-threat.aspx#3330009Tue, 04 May 2010 01:41:27 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3330009Rob Lewis<p>The &quot;attribution&quot; card, is one that poker players with low assurance hand seems to always lead with (not mentioning any names here). </p> <p>Case is point. The ShadowNet breach of the Dalai Lama. </p> <p>Is there any doubt as to who the attackers were in this case? None whatsoever. Yet despite constant vigilence by his team and the assistance of supposedly one of the best analyst teams in the world, a second breach was not prevented and it took 8 months to confirm the breach. </p> <p>I suggest that you and Scott Charney head over to the Cyber Secure Institute Web site and check out General Habiger's white paper calling for inherently secure systems as the only real defense since attribution is problematic. It is absolutely worthless if there is no recourse available, as it was in this example.</p><div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=3330009" width="1" height="1">