Ads by TechWords

See your link here
Receive the latest technology news and information.
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
Cloud Computing
View all newsletters




Privacy Policy
 

Feds plan cybersecurity center

The White House is denying it's looking to monitor data as part of the president's National Plan for Protecting Cyberspace.

September 2, 2002 12:00 PM ET

Computerworld - Washington

As the White House last week began putting the final touches on its long-awaited National Plan for Protecting Cyberspace, administration officials took issue with a press report that suggested the plan would include provisions to expand the government's data collection and surveillance.


The plan, which is scheduled to be released Sept. 18 during a ceremony at Stanford University, does include a provision to build a cybersecurity network operations center. However, a published report suggesting that the NOC would collect and examine e-mail and data traffic from major Internet service providers and other private-sector companies is misleading and inaccurate, said Tiffany Olson, an assistant to Richard Clarke, chairman of the President's Critical Infrastructure Protection Board and the principal force behind the strategy.


Olson said the published report is necessarily inaccurate because the plan hasn't even been finished.


"There were many initial drafts, and many organizations provided input," she said. "But we've just started to finalize it this week."


The concept of developing a federal NOC is definitely in the strategy, but not with the aim of gathering e-mail data or expanding government surveillance, Olson said. Rather, the federal NOC would be modeled after the Bethesda, Md.-based SANS Institute's Incidents.org Web site and Internet Storm Center, a virtual organization of advanced intrusion-detection analysts, forensics experts and incident handlers from across the globe.


Howard Schmidt, co-chairman of the Critical Infrastructure Protection Board, told Computerworld last week that the plan is to simply ask for greater voluntary data sharing on matters such as viruses and worms. He also stressed that establishing a central NOC isn't part of a plan to increase the government's surveillance of private data.


Schmidt said the need for a central government NOC stems from the lack of a single collection point where government security can be analyzed. This central NOC would collect data from other government NOCs, such as the FBI's National Infrastructure Protection Center and the Pentagon's Joint Task Force for Computer Network Defense.


These NOCs, in turn, would function in a fashion similar to the private sector's Information Sharing and Analysis Centers (ISAC)—alliances formed within vertical industries to improve information sharing about security vulnerabilities and threats.


The SANS Storm Center uses advanced data correlation and visualization techniques to analyze data collected from more than 3,000 firewalls and intrusion-detection systems in more than 60 countries. "We're hoping the [ISACs] one day establish their own independent Storm Center network," said Alan Paller, director of the SANS Institute.


And that may be much easier to do now that Redwood City, Calif.-based Check Point Software Technologies Ltd., which operates more than 63% of all firewalls worldwide, is adding a Storm Center client in every one of its 260,000 gateways, said Paller. "That means anyone who wants to set up a Storm Center network can just tell their members to turn on the client and point it to their network node," he said.




Jump to comments

Legislation/Regulation

Additional Resources

EFD vs. HDD - What You Need to Know
WHITE PAPER
Enterprise flash drives provide a new Tier 0 storage layer capable of delivering high I/O performance at a very low latency. Proper use of EFDs in an Oracle environment can deliver increased performance compared to fibre channel drives. Read the recommendations for identification of the best DB components for EFDs.
Gartner Research Report: Magic Quadrant for Application Delivery Controllers, 2009
WHITE PAPER
The market for products to improve the delivery of application software over networks remains dynamic and innovative. Vendors focused on solving enterprises' most-pressing application problems have become the top players.
Eight Criteria for Server Load Balancing
WHITE PAPER
Server load balancers are a simple yet highly effective means to scale an application environment while ensuring its availability. Today's solutions should also address application performance and security. Read about the top eight criteria you should consider when choosing a server load balancer and how Citrix NetScaler meets those requirements.

White Papers & Webcasts

The Workday User Experience Video
Watch Workday's Creative Director, Scott Lietzke, discuss the business-centered design philosophy at Workday.

Business Process Framework Demo
Learn about Configurable Business Processes and Calculated Fields. Watch Now!

Manager Experience Demo
Go beyond self-service solutions to perform more effectively. Watch Now.


IT Jobs