Tools to address botnets not widely used: US cyber report

There are effective tools to address botnets and other automatic, distributed threats, but they are not being widely used, say the U.S. Commerce and Homeland Security departments in a report released Wednesday.

The report, Enhancing the Resilience of the Internet and Communications Ecosystem Against Botnets and Other Automated, Distributed Threats, was in compliance with a cyber security executive order issued by President Donald Trump in May 2017, Strengthening the Cyber Security of Federal Networks and Critical Infrastructure.

Also issued Wednesday in response to the executive order was a report by both departments on the need for improvements in the cyber security workforce.

The botnet report says while there are tools available to combat botnets that are routinely applied in selected market sectors, “they are not part of common practices for product development in many other sectors for a variety of reasons, including (but not limited to) lack of awareness, cost avoidance, insufficient technical expertise and lack of market incentives.”

Goals and actions outlined in the report include identifying a clear pathway toward an adaptable, sustainable and secure technology and promoting innovation in the infrastructure to adapt to evolving threats and prevent, detect and mitigate automated distributed attacks. 

It also recommends promoting and supporting coalitions between the security, infrastructure and operational technology communities, and increased awareness and education across the ecosystem.

The cyber security workforce report, Supporting the Growth and Sustainment of the Nation’s Cybersecurity Workforce: Building the Foundation for a More Secure American Future, states “the private and public sectors need to align education and training with employers’ cyber security workforce needs, improve coordination and prepare individuals for lifelong careers.”