CERTIHASH 首席执行官 Bryan Daugherty 解释区块链如何增强网络安全

SmartLedger 董事长兼 CERTIHASH 首席执行官 Bryan Daugherty 与 Kurt Wuckert Jr. 一起在 CoinGeek 每周直播中讨论网络安全以及区块链如何增强网络安全。

SmartLedger Chairman and CERTIHASH CEO Bryan Daugherty joined Kurt Wuckert Jr. on the CoinGeek Weekly Livestream to discuss a range of topics, including the recent CrowdStrike cybersecurity outage, the use of blockchain in the cybersecurity stack, and the challenges of detecting old data breaches.

SmartLedger 董事长兼 CERTIHASH 首席执行官 Bryan Daugherty 与 Kurt Wuckert Jr. 在 CoinGeek 每周直播中讨论了一系列主题，包括最近的 CrowdStrike 网络安全中断、区块链在网络安全堆栈中的使用以及检测旧数据泄露的挑战。

Here’s a summary of the key points discussed in the livestream.

以下是直播中讨论的要点摘要。

What happened with CrowdStrike?

CrowdStrike 发生了什么？

The conversation kicked off with the recent cybersecurity outage caused by CrowdStrike’s botched update in July. This incident is being touted as the biggest event in cybersecurity in a long time.

此次对话始于最近因 CrowdStrike 7 月份更新失败而导致的网络安全中断。该事件被誉为长期以来网络安全领域最大的事件。

Wuckert asked Daugherty for his take on what happened and whether it may be related to other incidents, such as Joe Biden’s resignation and the attempted assassination of Trump.

伍克特询问多尔蒂对所发生事件的看法，以及这是否可能与其他事件有关，例如乔·拜登的辞职和特朗普的刺杀未遂。

Daugherty explained that he can’t pull those strings together directly, but he does know that CrowdStrike is one of the top cybersecurity firms and works with many prestigious companies, including the U.S. government. It is strange that they pushed an update at 02:00 on a Friday, and they should have followed strict, certified protocols to prevent such incidents from occurring.

Daugherty 解释说，他无法直接将这些联系起来，但他确实知道 CrowdStrike 是顶级网络安全公司之一，并与包括美国政府在内的许多知名公司合作。奇怪的是，他们在周五的 02:00 推送了更新，他们应该遵循严格的、经过认证的协议来防止此类事件发生。

However, Daugherty also pointed out that the CrowdStrike incident is part of a larger problem in cybersecurity today. It takes an average of 292 days to detect a network breach, which gives attackers plenty of time to move laterally, steal data, and cover their tracks. This is one of the problems that Sentinel Node solves. We need much faster detection, and we need to incentivize honesty. The reputational damage, fines, and other consequences currently incentivize cover-ups and obfuscation.

不过，Daugherty 也指出，CrowdStrike 事件是当今网络安全中一个更大问题的一部分。检测网络漏洞平均需要 292 天，这为攻击者提供了充足的时间横向移动、窃取数据和掩盖踪迹。这是Sentinel Node要解决的问题之一。我们需要更快的检测速度，并且需要激励诚实。目前，声誉受损、罚款和其他后果助长了掩盖和混淆视听的行为。

What does using blockchain in the cybersecurity stack look like in practice?

在网络安全堆栈中使用区块链在实践中是什么样的？

Daugherty described blockchain as the foundation for secure communication. When combined with TCP (Transmission Control Protocol), it makes much more secure data packet transmission possible. Combine this with decentralized record storage, and you have the potential to revolutionize cybersecurity.

多尔蒂将区块链描述为安全通信的基础。当与 TCP（传输控制协议）结合使用时，它使得更安全的数据包传输成为可能。将其与去中心化记录存储相结合，您就有可能彻底改变网络安全。

Eventually, Daugherty believes that companies like CrowdStrike and even his own will become unnecessary. Right now, they’re required to be between people and their data by necessity, but as a greater understanding of blockchain proliferates, governments and larger players will develop their own solutions. There’ll still be room for companies like CERTIHASH to serve smaller companies that don’t have the expertise, but the big ones will pull away and eliminate the need for third parties.

最终，Daugherty 相信像 CrowdStrike 这样的公司甚至他自己的公司都将变得不必要。目前，它们必须介于人们和数据之间，但随着对区块链的深入了解，政府和更大的参与者将开发自己的解决方案。像 CERTIHASH 这样的公司仍然有空间为不具备专业知识的小公司提供服务，但大公司将退出并消除对第三方的需求。

What is Sentinel Node?

什么是哨兵节点？

Sentinel Node is a tool designed to bring down detection time for network intrusions. It takes a snapshot of the state of a computer network every 10 seconds and stores it on the blockchain, but that could be reduced to milliseconds. This provides a complete, immutable record of the network’s activity, which can be used to quickly detect and investigate any suspicious activity.

Sentinel Node 是一款旨在缩短网络入侵检测时间的工具。它每 10 秒拍摄一次计算机网络状态的快照并将其存储在区块链上，但这可以减少到毫秒。这提供了网络活动的完整、不可变的记录，可用于快速检测和调查任何可疑活动。

Education is catching up to blockchain innovation, and finally, people are beginning to realize the value of these tools. That said, it’s still up to blockchain innovators to demonstrate the value proposition of their tools.

教育正在追赶区块链创新，最终，人们开始意识到这些工具的价值。也就是说，区块链创新者仍然需要展示其工具的价值主张。

Is old data always going to be a problem?

旧数据总是会出现问题吗？

Wuckert pointed out that, by now, we all have a long data trail behind us, and even very old data is sitting on a server somewhere and can be breached. Is this always going to be a problem?

伍克特指出，到目前为止，我们背后都有很长的数据踪迹，甚至非常旧的数据也保存在某个服务器上，并且可能会被破坏。这总是会成为一个问题吗？

Daugherty joked that an EMP or massive cyberattack could wipe out the data records. However, there’s also the possibility that new, innovative tools can be developed to help. Right now, large companies dictate what technology governments take up, but that could change as small companies shake things up. It’s also up to us as Internet users to be more mindful of what we share.

多尔蒂开玩笑说，电磁脉冲或大规模网络攻击可能会消除数据记录。然而，也有可能开发出新的创新工具来提供帮助。目前，大公司决定政府采用哪些技术，但随着小公司的改变，这种情况可能会改变。作为互联网用户，我们也有责任更加注意我们分享的内容。

Has IBM adopted CERTIHASH tools in-house?

IBM 是否在内部采用了 CERTIHASH 工具？

Daugherty confirmed that IBM was extremely impressed with the CERTIHASH tools when they were developed. They wanted to work with IBM (NASDAQ: IBM) both to educate them on the technology and to be associated with their brand.

Daugherty 证实，CERTIHASH 工具的开发给 IBM 留下了深刻的印象。他们希望与 IBM（纳斯达克股票代码：IBM）合作，既向他们提供技术教育，又与他们的品牌建立联系。

CERTIHASH reminds me of an airplane’s black box. Is that a fair way to think of it?

CERTIHASH 让我想起了飞机的黑匣子。这是一个公平的思考方式吗？

Daugherty agreed that these tools can provide a lot of forensic intelligence. This information allows you to better understand the breach and the actions taken, which have consequences for insurance, among other things.

多尔蒂同意这些工具可以提供大量的取证情报。这些信息可以让您更好地了解违规行为和所采取的行动，这些行动会对保险等产生影响。

Why did CERTIHASH use the BSV blockchain as opposed to a third-party solution like DigiCert?

为什么 CERTIHASH 使用 BSV 区块链而不是像 DigiCert 这样的第三方解决方案？

For Daugherty, it’s all about the proof of work (PoW). It provides the checks, balances, and greater security of records. The data integrity provided by PoW is unrivaled.

对于 Daugherty 来说，一切都与工作量证明（PoW）有关。它提供检查、平衡和更高的记录安全性。 PoW 提供的数据完整性是无与伦比的。