Cyber security specialists are asking the wrong question when it comes to securing computer networks against external threats, said Richard Bejtlich, chief security officer for private security contractor Mandiant of Alexandria, Va. Testing for network vulnerably gives Air Force cyber officials no idea of the enemy they are up against, said Bejtlich Friday at AFA’s Cyber Futures Conference in National Harbor, Md. Instead, cyber defenders should develop requirements for an “Are you compromised?” assessment to provide real intelligence on the enemy, he suggested. “I think that could be a real game changer, because right now we’re going onto a football field—nobody knows what the score is, we have a sense that we’re getting killed, but the only metrics we have” are on our own defenses and not the forces the enemy is bringing to bear, he explained. “You just paid a lot of money for a test [for which] you know what the answers are going to be,” he added.
The Air Force overall reduced its size by 120 aircraft in fiscal year 2021, but kept about the same number of fighter, bomber and attack aircraft, according to data supplied by the service. The F-35 fleet saw the biggest increase while the B-1B bomber fleet saw the largest decline.