YouSaid · the spoken record

Andy Purdy

lines on the record: 70
first: 2019-08-26
most recent: 2019-08-26
sittings or episodes: 1
sources: podcast

Every line below is reproduced as it was said and linked to the record it came from. Nothing here is summarised or generated. Directory · Search · Corrections

“Well, I worked a number of jobs after I left Department of Homeland Security, working for a number of small startups. And then I was at Computer Sciences Corporation, a defense contractor. And I got recruited by the man who had until he joined Huawei was the chief information officer for the UK government, had just led a transformation of that. And he basically pitched me over some months about the fact that I could be an advocate for a safer cyberspace from a Chinese company. And the model in the last seven years, how it has unfolded, of what we've done, how we've tried to strengthen our defenses, our ability to detect attacks on cybersecurity and privacy, our ability to promote the resilience of the things that we do and make our products more secure has been everything that I was told it would be. So it has been a tremendous, tremendous experience.”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“Well, essentially, the U.S. government, and I think most governments use a risk analysis. So, for example, the UK, those analysis or the communication networks, they say, okay, well, the communication networks are essential. What are the key nodes? What are the key parts of the network? So let's find out what those are. Let's identify the risk to those. Let's make sure there's diversity of supplier, more than one supplier for each of those. Make sure there's not somebody has too big a market share. So that way you can promote resilience because you want to make sure things are up and running. In the US, our communication AT&T, Verizon, the major companies, they've worked very well in a voluntary way with some direction from our federal communications commission to try to identify what are the priorities for managing the risk and maintaining the resilience of our communication networks. And so there's been an awful lot of public-private collaboration to do that Department of Homeland Security has just launched coming out with some results of an effort. Let's analyze 5G risk. What do we need to worry about?”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“Well, and when you look at things like spam, which can contain an awful lot of malware and these botnets, these organized networks of bots which are basically computer robots, your computer can be taken hostage by somebody and you don't even know what's happening. So the ability to launch attacks from millions of computers using these techniques. That creates this white noise of cyberspace that makes it easier for the bad guys to operate hidden in that white noise. They don't have to use the most sophisticated cyber threats. They can use normal threats because everything is a little too vulnerable. And so we've got to try to drain the swamp on that so that way we can see them more sophisticated attacks and attribute to whoever's doing it the fact that they're doing it and we can force them to stop.”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“It could Even just the Russian bot stuff, even just on regular information, shows how easy it is to do that. In fact, that's actually really effective. It's sort of muddying all the waters so that you can't see anything clearly, essentially.”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“As we become dependent on these systems, the data, and we often talk about personal data from a privacy perspective, but the data on which the networks and systems function. For example, the banking system, the SWIFT data. We have to not only have the information, we have to have accurate information. So if the bad guys can either block us from having the information Or they can corrupt the accuracy, the information, so we don't know where it's corrupted. It could shut us down in devastating ways. So there are a number of those are some of the kinds of things that we're really worried about.”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“The biggest concerns certainly are and have to be from a national security perspective what could nation states do to impact this? So the potential of affecting our command and control, for example, if we're in a kinetic war, military force, the possibility that a cyber series of sophisticated, prolonged cyber attacks could lay the groundwork for some kind of a military attack. Those kinds of things to make sure that we control the battle space, to make sure we have access to information, to make sure our society can function, including our defenses, that's probably one of the biggest things. And, of course, people fear attacks, say, on the power grid. If you could bring down the power grid, that could be part of sustained kind of attacks or other kinds of attacks.”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“So, where are we right? What are the biggest threats? I mean, you talked about data breaches, obviously, and that's more around privacy and consumer. It's more about fraud, essentially, from your perspective, what are the ones we're facing the most, including state actors like China or Russia or Iran or anybody else. It's been more Russia moving in on the United States in certain ways. It's been Iran. It's been lots of different countries, North Korea.”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“Well, I think the reality in the years since I left the White House staff, which was like 16 years ago, the biggest cybersecurity issues with a couple of exceptions have been like data breaches. So there's been a lot of talk about what's necessary for cybersecurity, what's necessary to protect privacy. But as a nation, we haven't come that far in terms of having robust capabilities to assess the risk, to manage the risk, and promote resilience. And as our technologies move from what they've been from an analog to a digital world, we are going to become much more dependent as a nation, our governments, our critical infrastructure, our private organizations, our citizens, much more dependent on information and communication technology.”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“And talk about those threats. What are they at this point? There's been a lot written about grid attacks. There's been written about banks. Every time there's an airline outage, I'm like, I wonder what that was, even though sometimes it's just.”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“Is one of many certs around the world that shares information about attacks, about discovered vulnerabilities in products and networks, and works together to collaborate to try to make sure that the key stakeholders understand the risks out there and that the risks are managed and there's prompt response to threats so we can prevent them from becoming much more serious.”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“It's US CERT. I mean, I ran the National Cybersecurity Division, so I was the lead cybersecurity official in the U.S. government. But the CERT, the U.S. CERT.”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“Well, it's basically a high level strategy of how the United States could take a more coordinated strategic approach. Essentially, what we need to worry about as a nation, what we need to do about it, everything from national security threats to cybersecurity awareness, user awareness, that kind of thing. And trying to set in motion creating the capabilities for our government and our critical infrastructure and our users to be more secure from a cybersecurity and privacy perspective.”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“I was a lawyer for a long time. I was a federal prosecutor. I worked on three congressional investigations. Work for the House Select Committee on Assassinations, for example, and I was Acting General Counsel of the U.S. Sentencing Commission. So I have a lot of experience in terms of corporate compliance, which is an aspect of what we're talking about. And in my work at the Sentencing Commission, I came to do a lot of work on new technologies and the kinds of punishments appropriate for those. And as it happened, when the White House set up a team to write the U.S. national strategy, I was asked to be a member of the 10 or 12 person staff that wrote this strategy that President Bush released in 2003.”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“That's what I mean. Right, exactly. And it's also against the backdrop of President Trump tweeting against Google very frequently about them being treasonous and helping. There's a lot of pressures in lots of ways. And it is all part of the trade talks and the idea of advantaging China, essentially. So let me go first into your background, and then we'll get more to where we are in the state of play One of the issues is what is a global company? What is a country, and what are their national security interests, and where we are as a technology community from a global perspective? Because I think that's one of the issues. Let's talk a little bit about your background so people don't get a sense of what you've been working on.”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“Well, it's interesting. That seems to be the position of some of what I mean. Anti-China, anti-Waui folks. Some of the others are saying there needs to be, and President Trump has said this one time or another, that there needs to be scrutiny of what we buy as to whether or not those particular products have some special national security significance or they're particularly rare or something like that, that perhaps a decision would be made that we would not be allowed to buy those. But right now it's reversed so that the presumption is that we can't buy any of those things. And so those companies have to apply for a license to be allowed to sell us any of those.”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“And the argument that the Trump administration and others are using is that Huawei is a national security concern and allowing you kind of putting you in a boat with, say, Iran and giving anything help to you all will hurt our national security.”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“Various kinds of telecommunication gear that we sell around the world. About 30% of all Huawei components for all of our global products come from U.S. companies. And if we can't get this resolved, if our suppliers can't get it resolved, we're going to have to find another avenue”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“Well, we're in the middle in the crosshairs between US and China and the trade talks, not a position that we wanted to be in, not in a position that we're happy to be in. It appears to be that we seem to be part of some kind of three-dimensional chess, and it's not really clear where it's going to end. I think most Americans we favor a trade deal with China. But right now there's so many different moving pieces that it's really hard to tell whether that's going to happen and if it's going to happen, when it's going to happen.”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“Yeah, so it's a part of a multi pronged effort by the government against Huawei, this part focusing on our suppliers. Basically, alleging that there is national security concerns about what these companies sell to us, the silicon companies, President Trump met with, I think, six CEOs of the companies a couple weeks ago at the White House. And so they basically, unless the license is granted to an individual company to sell the Huawei, Huawei cannot buy from that company. Right. After the expiration of the next 90 days”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT
“Well, there are a lot of moving pieces right at the moment. This week, I guess President Trump announced that there would be a 90-day extension of the limitation on American suppliers to be able to sell to Huawei, about $11 billion worth of technology. Comprising about 40 to 50,000 American jobs that are at risk in this.”
2019-08-26 · Decoder with Nilay Patel · Recode Decode: Huawei's chief security officer in the US, Andy Purdy · IDENTIFIED FROM THE TRANSCRIPT