Name: FireEye CEO Insists Repercussions Are Necessary to Stop Hacking
Uploaded: 2017-03-22
Duration: 3 min 49 s
Description: Kevin Mandia, CEO of the cybersecurity company FireEye, discussed the recent indictment of Russian hackers.

[ MUSIC ] Hello, and welcome to Future of Work. My name is Robert Hackett. I'm a reporter here at Fortune magazine. And we're here with Kevin Mandia, the CEO of FireEye. Today we'll be discussing cybersecurity and the future of work. So Kevin- Yes. What do you see businesses doing wrong today? Obviously everybody is getting hacked all the time, they're on these data breaches constantly happening. What is it really doing wrong? What are they, what can they do to improve? Well, I don't know if there is anything anybody is doing wrong. It's, there's a bunch of companies that are well intention trying to do the right things, the problem is the asymmetry in cyberspace we're getting sucker punched pretty bad. We haven't figured out As an international community, what are the rules of engagement or what's fair game for government activities? For offensive activities in cyberspace conducted by state sponsored hackers. Until we figure that out, I always use hockey analogies on this one. The puck's gonna get in the net, meaning we're gonna continue to read about intrusions Because it's just so much harder to play defense than to play offense. What trends are you seeing in cyber security this year? Well, that's a great question. I think most nations are operating at capacity. A question I've been getting a lot lately is after the election, is the Russian government or their state sponsored hackers escalating? And I'm like, I don't know if there's much more they can do. They're already operating at full scale and scope. Of their capabilities. So I don't know if we'll notice an uptick cuz I think they're full board pedal to the metal doing intrusions on a daily basis and making a living off of doing that. But the trends we see there's no risks or repercussions To hacking companies in the West, you know? And as long as there's no risks or repercussions, if you can be hacked, you will be hacked. And that trends not going to go away. Until we can impose some risks, some deterrents, these intrusions are here to stay. So we're kind of at a tipping point where we've gotta figure this out as a sovereign nation, the United States What are we gonna do to deter? What are we gonna do to establish fair game or rules of engagement and right now, I think what we're up against is the safe harbors, like Russia, like North Korea, like Iran, where it can do nation state capabilities and go on offense. And we gotta figure out what we're gonna do here. So I think you saw there's an indictment against some Russian hackers That's a great first step to make sure we start having dialogue. Others call it public shaming, but we've gotta make the world aware of what's happening and that's the first step. We did that with China, we say, hey look, there's a bunch of cyber espionage from China against the United States and against private sector companies And we saw that threat we kind a arbitrated that and figured out what's fair game and now we're started do that with Russia. Are the attack methods changing at all Not as much as you read about it. Every secco, every attack more sophisticated. It's been my observation, right now even the attacks or reign about that are being attributed to Russia or attributed to China. The one rule of engagement I haven't seen broken yet is these nations are choosing to, they have the veil of anonymity of the Internet, but they're still wearing the Russian jersey as they do the intrusion. They're signalling. Like when the DNC breach happened, we didn't have any doubt that breach came from Russia. When the Chinese hack, it's still from China. Nobody's violated the That rule of, you had it anyway, of masquerading as somebody else, and that's a good thing, so I hope that doesn't break, but usually when they break in, it's, they're using language skills and spear phishing, that is the targeted attack du jour And that hasn't changed for about a decade. [ MUSIC ]

Kevin Mandia, CEO of the cybersecurity company FireEye, discussed the recent indictment of Russian hackers.