mr. larry clinton, chief executive officer of internet alliance. we look forward to your comments. >> morning mr. chairman and members of the committee. there's been a change in the cyber picture in the last 24 months. the main concerns are not hackers and kids in basement, cyber attacks have grown sophisticated using what is referred to as the advanced persistent threat. apt. they are pros and highly organized and well funded and often state supported expert attackers that use sets of attacking methods both technology and personal. they target a system, if they do, they will breech it. conventional defenses do not work against the apt, they are evading all anti-virus intrusion and best practices, remaining inside the target's network while the target believes they have been removed. it means we need to modernize our idea of what is cyber defense. traditional approaches, including federal regulation will not solve the problem because they will be reactive and not stay ahead of the problem. worse, businesses will be trying to build efforts in house

mr. larry clinton, ceo of internet security alliance. thank you for being here today. we look forward to your comments. >> good morning. there has been dramatic change in that of cyber threat picture in the last 18-24 months. the main concern is not hackers or kids in basements. cyber attacks have grown increasingly sophisticated, using what is known as the advanced persistent threat. these hackers are pros. they are expert attackers. they target a system and almost invariably compromise or breach it. unfortunately, conventional information security defenses don't work against them. they are successfully evading best practices. it does not mean we have no defense. it means we need to modernize our notion of what constitutes cyber threats. traditional approaches will not solve the problem because they will be largely reactive and not stay ahead of the changing threat nature. bad regulation could be counterproductive, leading companies to expand their limited resources. fundamental to stopping the advanced threat is to understand that our biggest problems are not technol

mr. larry clinton, ceo of internet security alliance. thank you for being here today. we look forward to your comments. >> good morning. there has been dramatic change in that of cyber threat picture in the last 18-24 months. the main concern is not hackers or kids in basements. cyber attacks have grown increasingly sophisticated, using what is known as the advanced persistent threat. these hackers are pro. they are expert at factors -- expert attackers. they target a system and almost invariably compromise or breach it. unfortunately, conventional information security defenses don't work against them. they are successfully evading best practices. it does not mean we have no defense. it means we need to modernize our notion of what constitutes cyber threats. traditional approaches will not solve the problem because they will be largely reactive and not stay ahead of the changing threat nature. bad regulation could be counterproductive, leading companies to expand their limited resources. fundamental to stopping the advanced threat is to understand that our biggest prob

mr. larry clinton, president and chief executive officer of internet officer of internet security alliancemr. clinton, thank you for being here today. we look forward to your comment. >> good morning, mr. chairman, members of the committee. it's been a dramatic change in the cyberthreat picture in the last 18-24 months. our main concern about hackers or kids in payson. the fact that he cyber system has been breached is to longer the metrics that determines whether or not based to attack as the successor. cyberattacks of the increasing sophistication using was coming for dinner as the advanced persistent threat, or the apd. abd attackers are pros. they are highly organized well-funded often state-supported expert attackers to use coordinated sense of attacking methods both technical and personal. perhaps most indicative of these attacks are they target a system they were almost infinitely compromise or breach. unfortunately, conventional information security defenses don't work against abd attackers. this doesn't mean that we have no defense. it means we need to modernize our notion of what