CERTIHASH 執行長 Bryan Daugherty 解釋區塊鏈如何增強網路安全

SmartLedger 董事長兼 CERTIHASH 執行長 Bryan Daugherty 與 Kurt Wuckert Jr. 一起在 CoinGeek 每週直播中討論網路安全以及區塊鏈如何增強網路安全。

SmartLedger Chairman and CERTIHASH CEO Bryan Daugherty joined Kurt Wuckert Jr. on the CoinGeek Weekly Livestream to discuss a range of topics, including the recent CrowdStrike cybersecurity outage, the use of blockchain in the cybersecurity stack, and the challenges of detecting old data breaches.

SmartLedger 董事長兼CERTIHASH 執行長Bryan Daugherty 與Kurt Wuckert Jr. 在CoinGeek 每週直播中討論了一系列主題，包括最近的CrowdStrike 網路安全中斷、區塊鏈在網路安全堆疊中的使用以及檢測舊資料外洩的挑戰。

Here’s a summary of the key points discussed in the livestream.

以下是直播中討論的要點摘要。

What happened with CrowdStrike?

CrowdStrike 發生了什麼事？

The conversation kicked off with the recent cybersecurity outage caused by CrowdStrike’s botched update in July. This incident is being touted as the biggest event in cybersecurity in a long time.

此次對話始於最近因 CrowdStrike 7 月更新失敗而導致的網路安全中斷。該事件被譽為長期以來網路安全領域最大的事件。

Wuckert asked Daugherty for his take on what happened and whether it may be related to other incidents, such as Joe Biden’s resignation and the attempted assassination of Trump.

伍克特詢問多爾蒂對所發生事件的看法，以及這是否可能與其他事件有關，例如喬·拜登的辭職和川普的暗殺未遂。

Daugherty explained that he can’t pull those strings together directly, but he does know that CrowdStrike is one of the top cybersecurity firms and works with many prestigious companies, including the U.S. government. It is strange that they pushed an update at 02:00 on a Friday, and they should have followed strict, certified protocols to prevent such incidents from occurring.

Daugherty 解釋說，他無法直接將這些聯繫起來，但他確實知道 CrowdStrike 是頂級網路安全公司之一，並與包括美國政府在內的許多知名公司合作。奇怪的是，他們在周五的 02:00 推送了更新，他們應該遵循嚴格的、經過認證的協議來防止此類事件發生。

However, Daugherty also pointed out that the CrowdStrike incident is part of a larger problem in cybersecurity today. It takes an average of 292 days to detect a network breach, which gives attackers plenty of time to move laterally, steal data, and cover their tracks. This is one of the problems that Sentinel Node solves. We need much faster detection, and we need to incentivize honesty. The reputational damage, fines, and other consequences currently incentivize cover-ups and obfuscation.

不過，Daugherty 也指出，CrowdStrike 事件是當今網路安全中更大問題的一部分。偵測網路漏洞平均需要 292 天，這為攻擊者提供了充足的時間橫向移動、竊取資料和掩蓋痕跡。這是Sentinel Node要解決的問題之一。我們需要更快的檢測速度，並且需要激勵誠實。目前，聲譽受損、罰款和其他後果助長了掩蓋和混淆視聽的行為。

What does using blockchain in the cybersecurity stack look like in practice?

在網路安全堆疊中使用區塊鏈在實踐中是什麼樣的？

Daugherty described blockchain as the foundation for secure communication. When combined with TCP (Transmission Control Protocol), it makes much more secure data packet transmission possible. Combine this with decentralized record storage, and you have the potential to revolutionize cybersecurity.

多爾蒂將區塊鏈描述為安全通訊的基礎。當與 TCP（傳輸控制協定）結合使用時，它使得更安全的資料包傳輸成為可能。將其與去中心化記錄儲存體結合，您就有可能徹底改變網路安全。

Eventually, Daugherty believes that companies like CrowdStrike and even his own will become unnecessary. Right now, they’re required to be between people and their data by necessity, but as a greater understanding of blockchain proliferates, governments and larger players will develop their own solutions. There’ll still be room for companies like CERTIHASH to serve smaller companies that don’t have the expertise, but the big ones will pull away and eliminate the need for third parties.

最終，Daugherty 相信像 CrowdStrike 這樣的公司甚至他自己的公司都將變得不必要。目前，它們必須介於人們和數據之間，但隨著對區塊鏈的深入了解，政府和更大的參與者將開發自己的解決方案。像 CERTIHASH 這樣的公司仍然有空間為不具備專業知識的小公司提供服務，但大公司將退出並消除對第三方的需求。

What is Sentinel Node?

什麼是哨兵節點？

Sentinel Node is a tool designed to bring down detection time for network intrusions. It takes a snapshot of the state of a computer network every 10 seconds and stores it on the blockchain, but that could be reduced to milliseconds. This provides a complete, immutable record of the network’s activity, which can be used to quickly detect and investigate any suspicious activity.

Sentinel Node 是一款設計用來縮短網路入侵偵測時間的工具。它每 10 秒拍攝一次電腦網路狀態的快照並將其儲存在區塊鏈上，但這可以減少到毫秒。這提供了網路活動的完整、不可變的記錄，可用於快速偵測和調查任何可疑活動。

Education is catching up to blockchain innovation, and finally, people are beginning to realize the value of these tools. That said, it’s still up to blockchain innovators to demonstrate the value proposition of their tools.

教育正在追趕區塊鏈創新，最終，人們開始意識到這些工具的價值。也就是說，區塊鏈創新者仍然需要展示其工具的價值主張。

Is old data always going to be a problem?

舊數據總是會出現問題嗎？

Wuckert pointed out that, by now, we all have a long data trail behind us, and even very old data is sitting on a server somewhere and can be breached. Is this always going to be a problem?

伍克特指出，到目前為止，我們背後都有很長的資料軌跡，甚至非常舊的資料也保存在某個伺服器上，並且可能會被破壞。這總是會成為一個問題嗎？

Daugherty joked that an EMP or massive cyberattack could wipe out the data records. However, there’s also the possibility that new, innovative tools can be developed to help. Right now, large companies dictate what technology governments take up, but that could change as small companies shake things up. It’s also up to us as Internet users to be more mindful of what we share.

多爾蒂開玩笑說，電磁脈衝或大規模網路攻擊可能會消除資料記錄。然而，也有可能開發出新的創新工具來提供協助。目前，大公司決定政府採用哪些技術，但隨著小公司的改變，這種情況可能會改變。作為網路用戶，我們也有責任更加註意我們分享的內容。

Has IBM adopted CERTIHASH tools in-house?

IBM 是否在內部採用了 CERTIHASH 工具？

Daugherty confirmed that IBM was extremely impressed with the CERTIHASH tools when they were developed. They wanted to work with IBM (NASDAQ: IBM) both to educate them on the technology and to be associated with their brand.

Daugherty 證實，CERTIHASH 工具的開發給 IBM 留下了深刻的印象。他們希望與 IBM（納斯達克股票代碼：IBM）合作，既向他們提供技術教育，也與他們的品牌建立聯繫。

CERTIHASH reminds me of an airplane’s black box. Is that a fair way to think of it?

CERTIHASH 讓我想起了飛機的黑盒子。這是一個公平的思考方式嗎？

Daugherty agreed that these tools can provide a lot of forensic intelligence. This information allows you to better understand the breach and the actions taken, which have consequences for insurance, among other things.

多爾蒂同意這些工具可以提供大量的取證情報。這些資訊可以讓您更了解違規行為和所採取的行動，這些行動會對保險等產生影響。

Why did CERTIHASH use the BSV blockchain as opposed to a third-party solution like DigiCert?

為什麼 CERTIHASH 使用 BSV 區塊鏈而不是像 DigiCert 這樣的第三方解決方案？

For Daugherty, it’s all about the proof of work (PoW). It provides the checks, balances, and greater security of records. The data integrity provided by PoW is unrivaled.

對 Daugherty 來說，一切都與工作量證明（PoW）有關。它提供檢查、平衡和更高的記錄安全性。 PoW 提供的資料完整性是無與倫比的。