The top cybersecurity official in the United States has resigned, a little more than a year after joining the Department of Homeland Security, the agency said Friday.
Yoran resigned Thursday because he had completed what he set out to do and felt it was time to move on, he said.
"When I spoke with the leadership of the department before I accepted the job, we were clear what the expectations and goals were," Yoran said. "The core objectives of building the cybersecurity division and US-CERT were complete."
Yoran ascended to the post in September 2003, after leaving security software firm Symantec to join the government. The homeland security position was Yoran's second tour of government duty; he once headed vulnerability assessment at the Department of Defense's Computer Emergency Response Team and managed the Pentagon's network security. In the interregnum, he founded network protection firm Riptech and then sold the company to Symantec.
While Yoran was given a weighty task in securing the nation's computers and providing cybersecurity guidance, he did not have full access to the Secretary of Homeland Security, critics say. Some members of Congress had introduced bills that would raise the top cybersecurity position to one that directly reported to Secretary Tom Ridge.
While many have charged the Department of Homeland Security with frustrating its cybersecurity staff by not giving their leaders enough clout, Yoran said that was not why he left.
"I never applied for an assistant secretary position," he said. "I never advocated for one."
Still, the technology industry pointed to Yoran's resignation as proof that the top cybersecurity position needed more authority within the Department of Homeland Security.
"It is even clearer today that cybersecurity must be properly elevated within the DHS in order to provide the necessary resources and the ability to implement policy that will better protect our information infrastructure," Robert Holleyman, president of the Business Software Alliance, said in a statement regarding Yoran's resignation.
Before Yoran, the United States' top cybersecurity position was held by Howard Schmidt, now the chief security officer at eBay, and before that by Richard Clarke. Clarke is the antiterrorism expert whose book "Against All Enemies" criticized the Bush Administration's tactics against terrorism. Clarke resigned the position in February 2003, Schmidt in April 2003.
When Clarke held the office, the top cybersecurity position was not part of the Department of Homeland Security, which was created in March 2003, but part of the Bush Administration. Both Schmidt and Clarke criticized the relatively low priority that cybersecurity was given in the organization of the Department of Homeland Security when it was created.
"It was an incredibly difficult situation to try and carry on an important mission," said Doug Goodall, CEO of RedSiren, a network monitoring company that competed with Riptech, the business that Yoran founded. "That's the reason that you have seen three directors step down in 24 months."
The Department of Homeland Security plans to announce a replacement for Yoran soon, a representative for the agency said.
Yoran wouldn't comment on the problems that the Bush Administration has had with keeping its cybersecurity czars, but he did say that the birth of his twins three months ago convinced him he should spend more time with family.
"You think cybersecurity is a full-time job, that's the easy part of the day," he said.
CNET News.com's Declan McCullagh contributed to this report.
from TECHNICAL and ORGANIZATIONAL stand point, data is even more valuable than a human life. it sounds sick, but consider this: from a technical stand point, if a human life is lost (say a CIA officer), a new officer can be hired and trained for the position. but if data is lost, or worse stolen, it is irreplacable. data that is stolen by terrorists, or lost in a terrorist attack, is gone for good. once classified data is in the hands of a terrorist, it is no longer valuable to the agency. good data saves human lives, incidentally, in battles etc. not giving proper clout to those in charge of the data, could really kill the country economically, if not killing actual people in the future. this job position should be reporting directly to Ridge bi-weekly.
In order to celebrate Valentine's Day, a survey asks Americans what they would give up in order to telecommute. Five percent say "spouse," while 12 percent say "daily shower."
There is much outpouring from stars on Twitter at the death of Whitney Houston. Moreover, Houston-related themes dominate the site's top 10 trends. At least in the U.S.
The Web fulminates when it is revealed that executives from VEVO--vehement music industry antipirates--played a pirated stream of an NFL playoff game at a party. VEVO claims it left its Wi-Fi unsupervised. Have we heard that argument before?
Tor's "obfsproxy" technology would make encrypted data look innocuous and let it dodge government censors. That could help citizens in Iran reach blocked sites as antigovernment protests reportedly loom.
MIT creates a simulation to celebrate the 50th anniversary of Spacewar. A relic of the early days of minicomputers, it was one of the first computer video games and set the stage for many others, including Asteroids.
A man's dream toy, a weapon-wielding remote-controlled toy spider, nets nearly half a million hits on YouTube in one day. Will it live up to the hype once it's released?
from a technical stand point, if a human life is lost (say a CIA officer), a new officer can be hired and trained for the position. but if data is lost, or worse stolen, it is irreplacable. data that is stolen by terrorists, or lost in a terrorist attack, is gone for good. once classified data is in the hands of a terrorist, it is no longer valuable to the agency. good data saves human lives, incidentally, in battles etc. not giving proper clout to those in charge of the data, could really kill the country economically, if not killing actual people in the future. this job position should be reporting directly to Ridge bi-weekly.