NSA Prodded to Look Beyond Its Fortress
542980
The National Security Agency is undergoing its largest recruiting drive since the Cold War. Some of the agency's top officials emerged about a year ago with a message: The NSA needs help fighting the war against global terrorism.
130974
The Cyber Security Industry Alliance has evaluated the Federal government's 2006 cybersecurity efforts and found them seriously wanting. The group has renewed its call for Congress to address the situation.
640827
The government needs to ensure greater protection for people's personal information, a think-tank  warns.
234165
Take a peek inside DCSNet, the FBI's nationwide eavesdropping network. It's far more intricately woven into the nation's telecom infrastructure than observers suspected. And it's growing.
452393
It is no secret that enterprise networks are increasingly under attack from a variety of sources that are difficult to thwart. To address the problem, many are turning to outside security providers, which is driving  the rapid evolution of new safeguarding technologies, according to  research conducted by the Yankee Group.
277157
A group representing technology industry executives yesterday called on the Bush administration to step up efforts to protect the nation&#39;s computer and Internet infrastructure, and it proposed
38008
Vulnerabilities could allow attackers to gain remote control of a system, security company says.
133820
The answer holds deep implications for the war on terrorism and U.S. security more broadly.
131409
By subjecting most visitors to scans of  their faces and fingers, the United States will this week  expand a mass surveillance system that threatens freedom and  race relations, a privacy watchdog says.
578839
The National Reconnaissance Office has asked the Justice Department to consider opening a criminal investigation into recent disclosures about a highly classified satellite program that has prompted criticism in Congress because of escalating costs, two administration officials said yesterday.
197264
Feds say switching browsers is one way to deal with security threats.
74655
(InfoWorld) - Since terrorists attacked the U.S. on Sept. 11, 2001, the government has begun a robust, and oft-criticized, electronic-surveillance program, but other IT-related security projects designed to thwart terrorism have made little progress. Better cybersecurity leadership, more cargo scanning on airplanes and ships and interoperable communications networks for emergency response agencies have all developed slowly. In some cases, fights in Congress have slowed progress, or the U.S. government has focused on other priorities. In other cases, the cost of IT projects has been an issue. The fifth anniversary of the attacks will focus attention as much on what has not been accomplished to protect the U.S. from future attacks as on what has been, chiefly the surveillance system. In recent months, civil liberties groups have protested the shadowy electronic-surveillance program run by the U.S. National Security Agency (NSA), with alleged cooperation from large telecommunications carriers. U.S. President George Bush has defended the program as necessary and legal, even as critics point out the NSA is spying on U.S. residents without court orders. Critics say the emphasis on surveillance instead of other technology has led to an invasion of innocent people's privacy and has not improved the nationâs security. The Electronic Frontier Foundation (EFF), leading a lawsuit against AT&T Inc. for its alleged participation in the NSA surveillance program, says some U.S. Federal Bureau of Investigation agents have complained about the quality of the leads generated by the program. âItâs like, âOh great, more calls to Pizza Hut,ââ said Kevin Bankston, an EFF staff attorney. âThis many may not help us connect the dots -- it may just be creating more dots.â But there hasnât been a major outcry about the NSA program from U.S. residents, with a common attitude being that innocent people should have nothing to hide. âI worry that a lot of people are speaking out of fear,â Bankston said. âYou wouldnât want government cameras installed in your bedroom or your bathroom, not because youâre doing anything wrong there, but because there are areas of our lives that should be private.â The biggest change since Sept. 11 is this culture of surveillance, added Jim Dempsey, policy director at the Center for Democracy and Technology, an advocacy group focused on civil liberties online. Congressâ quick passage of the Patriot Act following Sept. 11 generated huge debates about its expansion of law enforcement powers, but the NSA program happened without congressional approval, he said. âAll the ink that was spilled over the Patriot Act is irrelevant â¦ if the president says heâll do what he wants,â Dempsey added. Combined with technology advances in areas such as storage, location awareness and facial recognition, these expanded government powers create âa pretty wholesale assault on privacy.â The Bush administration has defended its tactics, with the president saying this month that the governmentâs counterterrorism efforts have subverted a number of plots since 9/11, including an anthrax attack and an airplane hijacking plan. The NSA surveillance program âhelps protect Americans,â Bush said in a speech Thursday. He called on Congress to derail court challenges to the NSA program by passing laws approving the program. âIf an al Qaeda commander is calling the United States, we need to know why theyâre calling,â he said. In three other IT-related areas, progress has been slow. Cybersecurity IT security groups have called for greater U.S. government emphasis on cybersecurity. In July 2005, U.S. Department of Homeland Security (DHS) Secretary Michael Chertoff announced plans to create a high-level position, assistant secretary for cybersecurity, but that position remains unfilled, despite pressure from IT groups. In addition, the DHS has never scored above an "F" in the federal government's annual computer security assessment. Another agency that has consistently pulled in "Fs" is the U.S. Department of Veterans Affairs, which was roiled earlier this year following a massive data breach. Part of the problem is that the government is simply not as interested as it should be in paying for online defense, according to Marcus Sachs, a former Bush administration advisor on Internet security. "It's kind of hard to convince the Congress to continue to fund cybersecurity efforts when the entire nation is shaking in its boots over chemical weapons and dirty bombs," said Sachs, who now works for SRI International, a research organization in Menlo Park, California. "We've not had any attributable cyberstuff that you could trace back to terrorism ... it's hard to make a case as to why we need to be worried about it." Those kinds of attacks may still come, said O. Sami Saydjari, founder and president of Cyber Defense Agency LLC, an IT security research and consulting firm in Wisconsin Rapids, Wisconsin. Just one massive cyberattack would boost U.S. cyberdefense spending, but a major attack could cost U.S. businesses up to US$1 trillion, he said. The technology to sufficiently harden U.S. cyberdefenses largely exists, but the government needs to create a program to improve the nationâs cybersecurity infrastructure, Saydjari said. âWaiting until we have these attacks is not the time to develop that program,â he added. âEvery year, the [cyber] attacks are better.â Communications interoperability for emergency response agencies Security experts, including the 9/11 Commission, have requested additional radio spectrum so that emergency response agencies can better communicate with each other. During the Sept. 11 attacks, some emergency responders found that their communication systems did not interoperate. More radio spectrum is on the way, but not until February 2009, the deadline Congress set for television stations to vacate the spectrum and move to all digital broadcasts. During a lengthy congressional debate over the digital TV transition, Senator John McCain, an Arizona Republican, tried to move up the transition date, arguing emergency responders need the spectrum as soon as possible. But congressional concerns over the timing of commercial auctions for part of the freed spectrum led to the later date. If the auctions were too soon, the spectrum might not sell for the $10 billion Congress has budgeted, opponents of an earlier deadline said. Meanwhile, some emergency response agencies are working with each other to improve interoperability, but those efforts are happening only in âpocketsâ of the U.S., said Steven Jones, executive director of the First Response Coalition, a group advocating for interoperable emergency communications. âThereâs no national strategy to coordinate all these efforts,â Jones said. âNationally speaking, I donât know that weâre better off than we were five years ago.â Cargo scanning Hobbled by high costs and slow machines, airlines and cargo ships scan only a fraction of the baggage they carry, leaving their passengers at risk of hidden explosives and other weapons, critics say. Most of the 6 billion pounds of cargo shipped on passenger airlines every year is commercial cargo, not checked baggage, and most of those crates and cartons are never scanned, exposing passengers to risk, according to U.S. Representative Edward Markey, a Massachusetts Democrat. The problem is even greater on commercial shipping venues, with unscanned cargo rolling into the U.S. every year aboard 11.2 million trucks, 2.2 million rail cars and 51,000 cargo ships, according to the DHS. The U.S. Transportation Security Administration, which operates airport security systems, says it faces a dilemma of choosing between inexpensive but inaccurate machines and expensive, high-quality machines. Airport workers now scan baggage with two types of systems. Explosive trace detection machines are affordable -- they're the size of a laser printer and cost a few thousand dollars -- but rely on slow and error-prone human workers to collect test samples. In contrast, explosive detection system machines can process up to 500 bags per hour but weigh as much as 17,000 pounds and cost up to $1 million. And airports must invest much more money to insert those machines into their existing baggage conveyor belts to speed the process. Still, officials with the Bush administration insist they've made significant progress in fighting terrorism over the last five years. A "network" of law enforcement and intelligence agencies, improved terrorist databases and international cooperation have successfully thwarted multiple terrorist plots, U.S. Attorney General Alberto Gonzales said in a speech Thursday. "If there is one thing that all Americans will be thinking and saying when we mark a terrible anniversary on Monday, it will be the simple phrase, 'never again,'" he said. "And the goal of 'never again' cannot be achieved by the federal government alone, by any state government alone, or by any local police force alone. Our network of prevention is instead the key to protecting the American people."
63439
The FBI failed to report accurately how many people it snooped on using anti-terror measures, officials said a government audit revealed today. Demands for banks and phone companies to hand over people's private information without telling them may also have gone beyond what is allowed by the Patriot Act, officials with access to the report told CNN.
675678
Legislation would grant the administration 'even broader authority to spy on Americans,' say privacy advocates.
46532
A group representing technology industry executives yesterday called on the Bush administration to step up efforts to protect the nation's computer and Internet infrastructure, and it proposed that the top official in charge be given a higher profile.
371416
Homeland Security Secretary Tom Ridge said yesterday that the role of overseeing computer security and the Internet should have a higher profile at the agency, in the face of increasing concern from technology executives and experts that cyber-security is getting inadequate attention.
60144
The tool was developed at Los Alamos National Laboratory in response to requests from the FBI to provide detail on network activity based on a list of IP addresses related to possible security problems.