NSA allies with Internet carriers to thwart cyber attacks against defense firms – The Washington Post

The National Security Agency is working with Internet service providers to deploy a new generation of tools to scan e-mail and other digital traffic with the goal of thwarting cyberattacks against defense firms by foreign adversaries, senior defense and industry officials say.

The novel program, which began last month on a voluntary, trial basis, relies on sophisticated NSA data sets to identify malicious programs slipped into the vast stream of Internet data flowing to the nation’s largest defense firms. Such attacks, including one last month against Bethesda-based Lockheed Martin, are nearly constant as rival nations and terrorist groups seek access to U.S. military secrets.

“We hope the . . . cyber pilot can be the beginning of something bigger,” Deputy Defense Secretary William J. Lynn III said at a global security conference in Paris on Thursday. “It could serve as a model that can be transported to other critical infrastructure sectors, under the leadership of the Department of Homeland Security.

via NSA allies with Internet carriers to thwart cyber attacks against defense firms – The Washington Post.

DHS, Defense Join Forces to Battle Cyber Threats | News & Opinion | PCMag.com

The federal government is not really known for its effective information sharing between separate departments, but two agencies said Wednesday said they want to change that when it comes to cyber-security issues.

The Department of Homeland Security and Department of Defense signed an agreement this week under which they will work together to defend the country’s Internet backbone.

“We are building a new framework between our Departments to enhance operational coordination and joint program planning,” DHS Secretary Janet Napolitano and DOD Secretary Robert Gates said in a joint statement.

Specifically, the two agencies are going to cross-pollinate a bit more when it comes to personnel. DOD will send its cyber analysts to work on DHS’s National Cybersecurity and Communications Integration Center (NCCIC) – a 24-hour incident response center that opened in October 2009. DHS, meanwhile, will send a senior staffer – as well as a support team of DHS privacy, civil liberties and legal personnel – to work at DOD’s National Security Agency.

via DHS, Defense Join Forces to Battle Cyber Threats | News & Opinion | PCMag.com.

Privacy group sues to get records about Google-National Security Agency relationship – latimes.com

The nonprofit Electronic Privacy Information Center, which has tangled with Google in the past over the security of its Gmail e-mail system, filed a request under the Freedom of Information Act for documents related to any agreement between Google and the NSA. The NSA denied the request, and on Monday the privacy group took the agency to court, seeking to force it to hand over records.

“As of 2009, Gmail had roughly 146 million monthly users, all of whom would be affected by any relationship between the NSA and Google,” the privacy group’s request said. “In order for the public to make meaningful decisions regarding their personal data and e-mail, it must be aware of the details of that relationship. Neither Google nor the NSA has provided information regarding their relationship.”

There probably isn’t a significant privacy concern in the NSA’s dealings with Google, said Richard Clarke, a top national security official in the Clinton and Bush administrations and author of “Cyber War: The Next Threat to National Security and What to Do About It.”

“But the easy way for Google and NSA to prove that is by letting an outside group come in and find out,” Clarke said.

Lewis said the NSA still must overcome a lack of trust among consumers after it enlisted telecom companies to help with surveillance it conducted without warrants in the wake of the Sept. 11 terrorist attacks.

Beyond the privacy issue, the Google-NSA alliance shows that no single U.S. government agency is responsible for defending the country’s private computer infrastructure from the daily onslaught of foreign-based cyber attacks, Clarke and Lewis said. NSA gets involved only in select cases.

via Privacy group sues to get records about Google-National Security Agency relationship – latimes.com.

Report: NSA initiating program to detect cyberattacks | Security – CNET News

The National Security Agency is reportedly launching a program to monitor for cyberattacks against government agencies and private companies responsible for key services such as electricity, nuclear power, and transportation, according to a story in Thursday’s Wall Street Journal.

The program, known as “Perfect Citizen,” is already triggering mixed reactions, says the Journal. Some in industry and government see it as an attempt by the NSA to intrude into domestic matters, while others believe it’s a much-needed step in fighting the threat of cyberattacks.

via Report: NSA initiating program to detect cyberattacks | Security – CNET News.

N.Y. bomb plot highlights limitations of data mining – Computerworld

Saturday’s botched bombing attempt in New York City provides an example of why the use of data mining approaches to uncover potential terrorism plots is a little like weather forecasting.

“You definitely need to do it, because it gives you warning of major storms,” said John Pescatore, an analyst with Gartner Inc. and a former analyst with the National Security Agency. “But it’s not going to tell you about individual raindrops.”

Faisal Shahzad, a naturalized U.S. citizen of Pakistani descent was arrested Monday at New York’s John F. Kennedy International airport in connection with an attempt to detonate a car bomb in Times Square. Shahzad, who is scheduled to be indicted on terrorism-related charges in Manhattan today, was pulled off a plane bound for Dubai, minutes before the jetliner was scheduled to take off.

Shahzad is alleged to have parked an explosives-laden vehicle in Times Square, apparently with the intention of blowing it up. Media reports quoting the FBI and other authorities said the bomb could have caused a substantial number of deaths and injuries had it detonated.

The anti-terrorism task force was quickly able to identify Shahzad as the prime suspect in the case thanks to a series of mistakes the would-be bomber made. But for the moment, there is little to show that authorities had any inkling of either Shahzad or of his plot beforehand.

via N.Y. bomb plot highlights limitations of data mining – Computerworld.

Google to enlist NSA to help it ward off cyberattacks – washingtonpost.com

The world’s largest Internet search company and the world’s most powerful electronic surveillance organization are teaming up in the name of cybersecurity.

Under an agreement that is still being finalized, the National Security Agency would help Google analyze a major corporate espionage attack that the firm said originated in China and targeted its computer networks, according to cybersecurity experts familiar with the matter. The objective is to better defend Google — and its users — from future attack.

Google and the NSA declined to comment on the partnership. But sources with knowledge of the arrangement, speaking on the condition of anonymity, said the alliance is being designed to allow the two organizations to share critical information without violating Google’s policies or laws that protect the privacy of Americans' online communications. The sources said the deal does not mean the NSA will be viewing users’s; searches or e-mail accounts or that Google will be sharing proprietary data.

The partnership strikes at the core of one of the most sensitive issues for the government and private industry in the evolving world of cybersecurity: how to balance privacy and national security interests. On Tuesday, Director of National Intelligence Dennis C. Blair called the Google attacks, which the company acknowledged in January, a “wake-up call.” Cyberspace cannot be protected, he said, without a “collaborative effort that incorporates both the U.S. private sector and our international partners.”

via Google to enlist NSA to help it ward off cyberattacks – washingtonpost.com.