2020-09-21 智邦网
编译 致远
据c4isr网9月18日报道
9月17日,美中央司令部宣布,将寻求工业界帮助,建立数据为中心的网络安全体系架构,采用AI和机器学习技术,根据用户需求限制数据访问,以提高与盟友与伙伴国安全信息共享。
该系统由银行提供信息服务,用户使用凭据登录,银行进入庞大数据库提取该用户特定信息。
该司令部与50多个国家分享数据和信息需求,需要建立安全体系,确保用户仅访问必要的数据信息。
CENTCOM looks to industry for data-centric network
WASHINGTON — U.S. Central Command needs industry’s help in designing a network infrastructure that provides improved secure information sharing with allies and partners, its top IT official said Sept. 17.
Brig. Gen. Jeth Rey, director of command and control, communications, and computer systems at CENTCOM, said his team is working to establish a data-centric architecture that uses artificial intelligence and machine learning to limit access to data based only on what a user needs.
“What I have the team looking at is working in that transport agnostic, looking at a data-centric connection, and then how can we then use attributes to then release information to that person who is trying to access the data. And so that’s where data centricity is at the end of the day trying to use machine learning and AI,” Rey said at the 2020 Intelligence and National Security Summit. “That’s where we need help from industry.”
Rey compared CENTCOM’s need to the service provided by banks, where a person logs in with credentials, and then the bank reaches into its massive database, pulling out only the information specific to that person.
CENTCOM, the largest combatant command, also has data and information sharing requirements with more than 50 nations, adding another degree of difficulty in developing a secure architecture where users can only access the necessary data.
“We here at CENTCOM are going to work with partners, and we need to share our information with them,” Rey said. “We need that help in order to display from a single document with multiple security measures … but release only that information on that document to that person by their credential.”
The need Rey described is similar to an architecture developed by the U.S. intelligence community for its data access needs. That platform, known as IC GovCloud, enabled users to store data in one place and the community to implement security measures to limit personnel access to what they “need to know,” said Greg Smithberger, chief information officer at the National Security Agency and director of the agency’s Capabilities Directorate.
“We built the GovCloud from the ground up with this thought in mind so that with the data comes knowledge of where it came from and what the rules are in terms of how it needs to be handled and who has the need to know. And the systems are enforcing that need to know, so that if the humans make a mistake, there’s a safety net there,” he said during the same webinar.
“When that’s designed the right way, you can actually turn the big-data analytics loose as long as they are compliant with this environment and, they can do their thing and still serve up only what people are authorized to see.”