Commentary

Michael Hickins
 

Will Cyber Attack Promote Einstein?

Government Web sites were subjected to a denial of service attack over the past few days, which may have the unintended consequence of helping the Obama Administration sweep away privacy concerns as it begins implementing a controversial cybersecurity plan.

Government Web sites were subjected to a denial of service attack over the past few days, which may have the unintended consequence of helping the Obama Administration sweep away privacy concerns as it begins implementing a controversial cybersecurity plan.An army of zombies simultaneously bombarded sites operated by major government agencies, according to a report from the Washington Post, including

the departments of Homeland Security and Defense, the Federal Aviation Administration and the Federal Trade Commission.

More Insights

White Papers

More >>

Reports

More >>

Webcasts

More >>

Several private-sector Web sites were also attacked, including NASDAQ, the New York Stock Exchange and the Washington Post itself. (The inclusion of the Washington Post indicates that either the masterminds behind the attack wanted to ensure that their actions were reported, or have an inflated view of the role of the press in American life.)

Conveniently, given the timing of the attacks, the Obama Administration just last Friday announced a plan to "produce warnings [about cyber attacks] that.. are 'consistently actionable and timely.'" The timing of the announcement is also curious -- some might say deliberately obscurantist -- coming as it did when most Americans were starting a three-day holiday weekend.

The plan is a reboot of a controversial Bush Administration project, dubbed Einstein, which leans on private telecom companies like AT&T, with an assist from the National Security Administration (NSA), to track traffic coming to and from federal Web sites.

Telecommunication companies would route data going to and from government networks through an NSA monitoring box, which would examine the traffic for malicious code or suspicious activity suggestive of a network attack.

While the Obama Administration claims that the only traffic analyzed will be to government Web sites, and that the traffic will be screened for malicious code (not actual words), Einstein alarms privacy advocates, who see a slippery slope to surveillance of civilian communications:

concerns over the NSA's involvement in the program lie in whether private data would be effectively "shielded from unauthorized scrutiny."

Clearly, the Obama Administration wants to do everything possible to prevent a crippling blow to the nation's information and communications infrastructure, and it makes more sense on the face of it to amend and reuse an existing plan than to scrap it and start afresh. The Administration is also aware that it is most vulnerable, from a purely political perspective, when it comes to national security and terrorism. But it shouldn't assume that the American public ever bought into what President Obama himself termed a "false choice" between civil rights and security.

Maybe Einstein is a necessary step to thwarting future cyberattacks, but the Administration should clearly outline steps it's taking to ensure that neither the government nor private enterprises have undue access to private communications.


Related Reading




Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

InformationWeek encourages readers to engage in spirited, healthy debate, including taking us to task. However, InformationWeek moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. InformationWeek further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
T-Shirt Giveaway T-Shirt Giveaway: Each week we're selecting one great comment from our readers. The author of the comment will receive an InformaitonWeek Community t-shirt. So get posting!
Subscribe to RSS

Resource Links