Adam Shostack Presents on “Lessons from Public Health for Cyber Security” at the National Academies
Last week, CyberGreen’s Lead Scientist, Adam Shostack, presented at the National Academies on “Lessons from Public Health for Cyber Security”. It was a dynamic exchange of ideas and questions that sparked deep, thought-provoking discussions with the nation’s top scientists.
Click here to access the recording
(Adam’s presentation begins around 57:00)
Here are a few of the most exciting and inspiring (in my opinion!) topics that were raised during the session:
What are the challenges around prediction and measuring the effectiveness of cybersecurity interventions, and how does that relate to what is chosen to be measured?
What are the trade-offs between business interests, public health, and vulnerable populations when it comes to cybersecurity policies and data collection?
(I’m personally fascinated by this topic…)
How do we define whether something is truly a “harm” in the cybersecurity context? When should an incident be considered as substantially impacting someone’s life versus just a minor inconvenience?
Is there an analog to Maslow’s hierarchy of needs that could be applied to cybersecurity and digital activities?
This intriguing question explored whether the well-known psychological model of Maslow’s hierarchy could be adapted to the
cybersecurity field. The idea is to identify foundational digital
needs—such as trusted hardware and secure identities—that must be met before higher-level security functions can be effectively implemented.
This analogy could help in prioritizing cybersecurity measures and understanding the interdependencies of different security needs.
My favorite was the discussion on “balancing interests”. This question brought to light the inherent conflicts that can arise when balancing different priorities in cybersecurity. Business interests might push for less regulation and lower costs, while public health considerations call for stringent protections and comprehensive data collection. Vulnerable populations, on the other hand, may require special considerations to ensure their safety and privacy. The discussion highlighted the importance of finding a middle ground that maximizes benefits for all stakeholders while addressing their unique needs and concerns.
Thoughts and way forward
The fact that Cyber Public Health (CPH) is now being discussed at such a prestigious forum is so encouraging! Thank you, Adam, for your vision and tireless execution. We hope to inspire more people to join the conversation.
Join the Dialogue: We’ve recently started a Slack channel to facilitate discussion and collaboration on all things Cyber Public Health! Click here to learn more and request an invite.
