BATON ROUGE, La. – More than 40 Louisiana National Guard members with the Cyber Defense Incident Response Team (CDIRT) took part in a two-day training event at Louisiana State University's Stephenson Disaster Management Institute in Baton Rouge, Nov. 14-15.
The team was created to respond to cyber events within Louisiana, to secure and restore affected networks by defeating threats and restoring normal operations. It is made up of Soldiers and Airmen who have technology backgrounds in both their civilian and military careers. They can be mobilized to work with the FBI Cyber Task Force to respond to cyber threats around the state.
"Think of where you already see the Guard," said Lt. Col. Henry T. Capello, chief communications plans officer. "We respond to natural disasters such as hurricanes and floods. A cyber-attack could very well be a man-made disaster that we need to respond to if a website gets hacked."
Capello stressed the importance of maintaining a strong cyber presence to defend key Louisiana assets, such as oil and gas pipelines, government security and even daily things that everyone deals with such as traffic grids.
Members of the CDIRT practice looking for potential security breaches by logging onto specially programmed computers that simulate unusual activity on common operating systems and website platforms that may indicate that a hacker is actively trying to compromise a website.
"It's a very interesting course," said Airman 1st Class Victoria Piconi, a member of the 236th Combat Computer Squadron and an information systems decisions science major at Louisiana State University. "We learned about vulnerability scanning here, and that is just not something that we learn in school."
Vulnerability scanning is a security technique used to identify security weaknesses in a computer system. Piconi said that the CDIRT uses that technique to look for areas that need attention in Louisiana's technology platforms.
Capello said that the CDIRT works especially well because the Soldiers and Airmen on the team are spread across the state from Shreveport to New Orleans, and a localized team can quickly be sent to an area where there is any suspicious cyber activity.
"We know it's coming," Capello said, "we just don't know when, so we need to be able to respond when it does come."