Testifying before the Senate Committee on Commerce, Science, and Transportation, Amoroso said, "Evolving and more lethal types of cyber-attacks can devastate infrastructure. It has become so easy and rampant that the risk has grown exponentially. The result is a laser-like cyber-attack on an unsuspecting business or government system." He added, "Last year the FBI announced that revenues from cyber-crime, for the first time ever, exceeded drug trafficking as the most lucrative illegal global business, estimated at reaping more than $1 trillion annually in illicit profits."
Most citizens equate the issue of cyber-security with viruses that find their way onto computers, or with the stories they hear about so-called "security breaches" resulting from laptops being lost or stolen. While these are certainly problems, from the perspective of protecting the nation's critical infrastructure, these issues are not nearly as severe.
Amoroso noted, "Cyber-security is more about protecting the infrastructure from intrusion by individuals or forces determined to disrupt the flow of data and the storage of information."
Amoroso recommended three actions to address the growing cyber threat to the U.S.:
- The federal government procurement process needs to be upgraded to implement sufficient security protections to deal with large-scale cyber-attacks.
- More international partnership and cooperation is required during a cyber-attack.
- Endorse several National Security Telecommunications Advisory Committee (NSTAC) recommendations to improve public and private sector communications to better thwart cyber-attacks.