Lt Col Srikant Mantravadi, USAF

“Know Your Enemy … Know Yourself” – Sun Tsu

“ Information is not knowledge” - Albert Einstein

“Knowing a great deal is not the same as being smart; intelligence is not information alone but also judgment, the manner in which information is collected and used”   - Dr. Carl Sagan

“Information is a source of learning. But unless it is organized, processed, and available to the right people in a format for decision making, it is a burden, not a benefit.”   - William Pollard

“Do not share the knowledge with which you have been blessed with everyone in general, as you do with some people in particular; and know that there are some men in whom Allah, may He be glorified, has placed hidden secrets, which they are forbidden to reveal.” - Ali ibn Abi Talib

Context

Agenda Definitions Current Network Defense Initiatives Current Information Sharing Striking the Balance Takeaways

DefinitionsNetwork Defense - Actions taken to protect, monitor,

analyze, detect, and respond to unauthorized activity within information systems and computer networks“Employs information assurance principles and includes

deliberate actions taken to modify an assurance configuration or condition in response to alert or threat information”

Information Assurance Principles - confidentiality, integrity and availability

Information Sharing - exchange of data between a sender and receiver. Four primary information sharing design patterns are sharing information one-to-one, one-to-many, many-to-many, and many-to-one. Information sharing platforms will provide controlled vocabularies, data harmonization, data stewardship policies and guidelines, standards for uniform data as they relate to privacy, security, and data quality

Network Defense The Need for More

“Can’t Protect It All” The Need for Better

“Still can’t provide 100% confidence” “Don’t have the latest/greatest”

The Need for Faster “Can’t keep up with the bad guys”

Information Sharing The Need for More

Accessible and Visible The Need for Better

Trusted and Understandable The Need for Faster

Governable

Striking a Balance - Recommendation #1: Be Ready to Share Understand the information your community

produces and be ready to share Initial reaction: Who needs this information? Secondary reaction: How do I ensure that the right

information gets to them and not to others that don’t need it

Map the Mission and the Network Know the difference between data and information Know the consumers and producers of the

information Know the exploiters and abusers of the information

No Substitute for LegworkNo Substitute for Legwork

Apply leverage at the seams of organizational boundaries Handover/Takeover processes Inherited Information Assurance controls Build understanding of mission impact & improvement

Avenues and ForumsUser Groups/ConferencesRequirement GatheringInternational Courts

Seize the initiativeKeep the enemy off-balance (counterattack)Outreach and Evangelize

Striking a Balance - Recommendation #2: Fix the Seams

The community has to come togetherThe community has to come together

Striking a Balance Recommendation #3: Process Information Well

Process information correctly the first timeKnow the what and the whyMark it for sharing (over/under classification)

ToolsGuardsBlogs, Wikis etc.

Consistent processing is vitalBuild a sharing organizational culture with

depthAdvertise your processDo it right the first time, you might not be able to do it

again.Do it right the first time, you might not be able to do it

again.

Takeaways Definitions Matter Concepts are OK … Execution needs work Key is to strike a balance

Do the legwork Mind the Gap Do it right the first time

Questions

?

Our lives depend on information sharingOur lives depend on information sharing