Feds planning early-warning system for Internet

Computerworld - LAS VEGAS -- The U.S. National Communications System (NCS) plans to develop a Global Early Warning Information System (GEWIS) to monitor the performance of the Internet and provide warnings to government and industry users of threats that could degrade service, such as denial-of-service attacks against the Domain Name Servers (DNS) that control Internet traffic.
Brenton Greene, deputy director of the NCS, speaking at a meeting here of the Federal Wireless User's Forum (FWUF), said the agency wants to use GEWIS (pronounced "gee-whiz") to monitor the "whole performance of the Internet," starting with the 13 high-level DNS, and provide early warnings not only to government Internet users, but also to operators of e-commerce Web sites.
The NCS was established in 1962 in the wake of the Cuban missile crisis to improve communications coordination among federal agencies. In 1984, President Reagan expanded the mission of the NCS to include management of national security and emergency preparedness communications among federal agencies and state and local authorities.
The NCS is co-managed by the White House and the head of the Defense Information Systems Agency, who is currently Air Force Lt. Gen. Harry D. Raduege Jr.
The communications agency wants to use GEWIS to "monitor the health of the Internet globally, looking for degradations in performance" and then providing warnings if necessary, Greene said in an interview. In remarks to the FWUF conference, Greene specifically cited the performance of e-commerce sites as one of the parameters that GEWIS will monitor.
Given the growing reliance of the U.S. economy on the Internet, any degradation in service -- or outright attack -- is seen as a potential economic problem that could seriously affect e-commerce-related businesses.
Greene said the NCS plans to build GEWIS around existing Internet performance tools integrated into a cohesive suite that can provide a top-level view of system performance. The Internet has become an increasingly important communications tool for federal agencies, with even the Defense Department funneling much of its unclassified traffic over the same network used by individuals to send e-mail and surf Web sites.
Greene emphasized that GEWIS won't be designed to monitor specific traffic on the Internet, but rather to check on its overall performance and status. That includes status checks on overall topology and peering between servers.
He called GEWIS a cyberwarning tool that could provide early indications of DNS flooding attacks and potentially catch viruses such as the Nimda worm or the Code Red virus, whose quick spread in 2001 plagued government and commercial Internet users. Greene said he believes GEWIS could have detected both Code Red