Since its inception in 2013, the federal government’s Continuous Diagnostic and Mitigation program (CDM), led by the Department of Homeland Security, has helped agencies discover up to 50 percent more assets inside their systems than they were previously aware of. And they’re able to do it in real time.
That is important because many of today’s threats are not coming from traditional IP addresses like desktops or laptops. They can enter a system through TV sets and mobile devices.
But as each threat is vanquished, a new one quickly surfaces. And there is a particularly difficult new trend that’s taking hold.
“Going forward, I think what we’re going to see is more encrypted data,” said Dennis Reilly, vice president of Federal at Gigamon, during our panel discussion, “Innovation in Government – Cyber leaders and CDM.”
Most agencies, he said, are reporting 70 percent or more encrypted data. And government cyber security leaders believe, if their adversaries can conceal themselves in an encrypted channel, they can slip in undetected.
What’s worse is, they can then set up an encrypted channel to ex-filtrate data and steal intellectual property. As a result, operationalization is what agency leaders are focused on.
Ben Liberty, CDM program manager in the Office of the Chief Information Officer at the Department of the Interior, said during the discussion they are focused on three capabilities, “vulnerability management, hardware and software asset management, and configuration settings.”
Kevin Cox, CDM program manager at DHS, said during the discussion, in the next two years, “we want to mature what we have in place. We’re about to roll out are a new scoring algorithm ‘Aware’ to help agencies measure their overall security posture.”
More innovation, expanded visibility to the cloud and mobile, is the objective he said. Ultimately, DHS wants to ensure that agencies’ data wherever it is, is protected.
Priorities of the CDM Program
What we see is the acceleration of the adversaries’ adaptation. We see not only that in the tactics, tools and procedures that they're using but also we see that increasingly in a convergence with the geo political forces and sometimes kinetic activity with cyber security.
Tom Welsh
Director of Systems Engineering, Public Sector, FireEye
Value of Technology and Practices of CDM
We are working to insure the foundation is solid across all of the agencies. Part of that is to get full mission operationalization out of the tools to ensure that the agencies can incorporate the value of the tools into their day to day operations, and into their security operations and really be able to step up in terms of their overall awareness and be able to use the information to benefit the agency.
Kevin Cox
CDM Program Manager, Department of Homeland Security
The Future of CDM
The short term projects we are really excited about are:
That we have enterprise vulnerability shared service capability. We already have vulnerability management throughout the department but were there two separate solutions to bring those together into that enterprise program.
We have a privileged access management solution that were piloting at some of our data centers…
And then application blacklisting, so that we can produce a move from application blacklisting to application white listing. I think that is going to be really exciting for us.
Ben Liberty
CDM Program Manager, Office of the Chief Information Officer, Department of Interior
Listen to the full show:
About FireEye
FireEye is the intelligence-led security company that offers a single platform, blending security technologies, nation-state grade threat intelligence, and world-renowned Mandiant consulting. We have a unique understanding of the challenges federal governments face, and we systematically align our solutions and products to meet their needs.
About Forescout Technologies
Forescout Technologies is the leader in device visibility and control. Our unified security platform enables enterprises and government agencies to gain complete situational awareness of their extended enterprise environments and orchestrate actions to reduce cyber and operational risk.
About Gigamon
Gigamon® is the recognized leader in network visibility solutions, delivering the powerful insights needed to see, secure and empower enterprise network. Our solutions accelerate threat detection and incident response times while empowering customers to maximize their infrastructure performance across physical, virtual and cloud networks. Since 2004 we have cultivated a global customer base which includes leading Service Providers, Government Agencies as well as Enterprise NetOps and SecOps teams from more than 80 percent of the Fortune 100. For the full story on how we can help reduce risk, complexity, and cost to meet your business needs, visit our website, follow our blog, and connect with us on your favorite social channels Twitter, LinkedIn and Facebook.
CDM Program Manager, Department of Homeland Security
Kevin Cox is the Program Manager for the Continuous Diagnostics and Mitigation (CDM) Program, within the Department of Homeland Security's Office of Cybersecurity and Communications. In this position, Mr. Cox leads the effort working collaboratively with federal agencies and industry to deploy cybersecurity solutions to 1) identify agency networks and assets and 2) protect them and agency data in near real-time against the growing cybersecurity threats. Prior to joining DHS, Mr. Cox served as the Deputy Chief Information Security Officer (CISO) at the Department of Justice, where he oversaw the organization's cybersecurity continuous monitoring capabilities and the security posture dashboard. Mr. Cox holds M.A. degrees from West Virginia University and the University of Chicago.
Willie Crenshaw
CDM Program Executive, NASA
Willie Crenshaw, Jr is a Cyber Security Program Executive for the National Aeronautics and Space Administration (NASA). For the past six years, Mr. Crenshaw has led NASA’s Continuous Diagnostics and Mitigation DEFEND Program (CDM). With over 25 years of experience in the Information Technology and Cyber Security field, Mr. Crenshaw has extensive experience in both private and federal government sectors.
Mr. Crenshaw has managed and implemented large networks and programs for various federal agencies such as the Department of Transportation, Department of Education and the Pentagon. Additionally he has also worked on high profile initiatives such as the F18 Super Hornet testing program at Patuxent River, MD and Single Agency Manager (SAM) at the Pentagon.
Prior to joining NASA, Mr. Crenshaw spent 10 years with the Department of Transportation (FRA) as the Information System Security Manager.
Crenshaw has a bachelor’s degree from Trinity College of the Bible and Theological Seminary and an associate degree in Business Administration and Management from Virginia State University and associate degree in Computer Technology from ECPI University.
Crenshaw also has earned numerous certifications from Microsoft, Novell, Cisco, and ISC2 for Cybersecurity.
Ben Liberty
CDM Program Manager, Office of the Chief Information Officer, Department of Interior
Ben Liberty is the Continuous Diagnostics and Mitigation (CDM) Program Manager for the Department of the Interior (DOI). In this position, Mr. Liberty supports DOI's Executive leadership and Bureaus and Offices to implement CDM as an Enterprise Program throughout the Department. Prior to joining DOI as a Federal employee, Mr. Liberty was a contractor who supported the Department's efforts as an early adopter of the CDM Program since 2013.
Greg Amori is a sales leader with over 20+ years in IT/Cybersecurity focusing on both Federal, Commercial, and International markets. He previously held leadership and individual contributor roles at IBM, BigFix, and Symantec. For the past 3+ years he has been at Forescout where he leads the Civilian and Mid-Atlantic Commercial Sales Teams. He has been part of the CDM program since its early inception from State Dept. He is passionate about solving customer problems and delivering successful solutions to complex issues. Greg lives in Arlington, VA with his wife and 3 daughters.
Dennis Reilly
Dennis Reilly, Vice President, Federal, Gigamon
Dennis Reilly has been Vice President of Federal at Gigamon for nearly seven years, leading the group to 28% compounded annual growth and a 61% market share in the network visibility space. With over 25 years of technology and business experience, Mr. Reilly is a strong advocate for the Federal government, applying information technology to strengthen security and improve innovation and productivity.
Prior to joining Gigamon, Dennis held sales leadership positions at companies such as Oracle, Netscape, BEA, and Plumtree Software. Earlier in his career, Mr. Reilly served as an officer in the U.S. Navy and earned his Bachelor’s degree at the United States Naval Academy. He also earned his graduate degree in business from Boston University.
Dennis resides in northern Virginia with his wife and has four adult children.
Tom Welsh
Director of Systems Engineering, Public Sector, FireEye
Tom Welsh is Director of Systems Engineering with the FireEye public sector team, where he leads an engineering practice focused on reducing the security risk to the missions of civilian departments/agencies. Working closely with Continuous Diagnostics and Mitigation (CDM) primes, Tom advises departments and agencies across all aspects of the program to best meet agency readiness and agency specific needs. Additionally, Tom is a champion of federal requirements to the FireEye executive leadership team, and e he played a leading role in the launch and FedRAMP authorization of FireEye government cloud services.
Welsh’s career supporting the federal government spans over 20 years. Prior to FireEye, Tom held a variety of leadership roles within the service provider community, including leading a federal systems engineering team for a cloud service provider, and a systems engineering team supporting the Department of Homeland Security for a managed services/internet service provider.
JJ Green
National Security Correspondent, WTOP
JJ Green is the National Security Correspondent at WTOP radio. He reports daily on international security, intelligence, foreign policy, terrorism and cyber developments and provides regular on-air analysis.
He joined WTOP on March 11, 2004. In the years since then, he has traveled to dozens of countries investigating, reporting and analyzing the U.S. war against terrorism and has interviewed the leadership of all the key national security components of the U.S. government and many security and foreign government officials around the world.
He hosts the weekly podcast, Target USA, which examines the threats facing U.S. He also hosts the weekly broadcast program “The Hunt,” and conducts in-depth interviews with experts on ISIS, al-Qaida, the Taliban and other emerging terror threats.
He’s been embedded with the U.S. military three times in war zones. He has reported from Kandahar, Zabul province and Kabul in Afghanistan. While embedded with the U.S. Air Force in 2006, he traveled 18,000 miles, to 10 countries, including Iraq, Djibouti, Afghanistan, Qatar, Kuwait, Kyrgyzstan, Turkey and others in 31 days, covering the war effort.
He has traveled to Israel, the Golan Heights, Israel’s borders with Syria and Lebanon, and Gaza. He interviewed Israeli and Palestinian political officials about the conflict there and the prospects for peace, and the roadblocks. Since 2013 he has spent a lot of time in North Africa, covering the rise and fall of ISIS and the flow of foreign fighters.
He is the recipient of the 2017 Gerald R. Ford Presidential Foundation award for Distinguished Reporting on National Defense for his series Anatomy of a Russian attack. He has also received a National Edward R. Murrow Award (2009) for “Hidden Hunter” — his reporting aboard a nuclear-powered, Los Angeles Class submarine underway in the Atlantic Ocean. He also won the prestigious Associated Press Douglas S. Freeman award in 2010 for his investigative series, “Dignity Denied,” which explored decades of neglect at America’s hallowed Arlington National Cemetery.
He has also won more than two dozen regional and local awards since he started working at WTOP. In 2012, he was honored by the University of Maryland, University College as their commencement speaker, in recognition of his broad body of national security reporting accomplishments. He has also been recognized by top national security officials for his deep knowledge of international affairs and ability to succinctly analyze complex issues.
In addition to his work at WTOP, JJ lectures regularly at universities and colleges on national security issues and speaks often to U.S. government, military and national security organizations. He is also a contributor to Jane’s Intelligence Review magazine.
Before joining team WTOP, he traveled to and reported on the events, issues, people and places of Africa, Latin America and Europe for the six years on public and international television. He began his career in Washington in 1989 at WMAL radio. In the mid-1990s he was trained as a TV correspondent at ABC News’ “Nightline.” Later he worked as a general assignment part-time correspondent at CNN. In the late 90s he was brought on at CSPAN as weekend host of the Washington Journal. In 1998, JJ began working as a correspondent for the Voice of America Television on Window on America and as host and correspondent of Africa Journal while traveling there frequently until he joined WTOP in 2004.
JJ graduated magna cum laude from Hampton University. He’s fluent in Spanish, speaks working level French and is studying Korean. An avid athlete, he is an accomplished speed skater, a regular runner, and swimmer, cross trainer and is an expert kickboxer.
You can email J.J. at jgreen@wtop.com or follow him on Twitter.