NSA encryption-defeating efforts will backfire, privacy advocates say
The agency's work against encryption will lead to a loss of trust in the government and US companies, some say
IDG News Service - The U.S. National Security Agency's efforts to defeat encryption will backfire by eroding trust in U.S.-based Internet services and in the agency's own efforts to aid U.S. companies with cybersecurity, a group of privacy advocates said Tuesday.
Many companies will see the NSA's dual roles of code breaking and helping U.S. companies with cybersecurity as clashing, following news reports of the agency's efforts to defeat online encryption, said Kevin Bankston, director of the Free Expression Project at the Center for Democracy and Technology.
The NSA has defeated encryption through a variety of means, including through reported backdoors in online services and covert compromises in encryption standards, according to news reports last month. Those reports followed revelations in June by former NSA contractor Edward Snowden about massive data-collection programs at the agency. The NSA says the data collection efforts, which include monitoring U.S. phones and overseas Internet communications, are necessary to counter the threat of terrorism.
For U.S. technology companies, it is "terribly debilitating and undermining to have the rest of world thinking there have been backdoors built into their systems to help the U.S. government," said Alan Davidson, a visiting scholar at the Massachusetts Institute of Technology and former public policy director at Google.
The NSA's encryption-defeating efforts will also hurt the agency, Davidson said at an Information Technology and Innovation Foundation discussion.
Many U.S. companies have asked the NSA for cybersecurity assistance in recent years, but "you'd be crazy to ask for that kind of help now," Davidson said. "You want to have the best mathematicians and security experts in the world to help you secure your systems. But when it's the same people who ... want to compromise the security of your system, that's probably going to dissuade you a bit."
The NSA's efforts will prompt other governments to require that their citizens' data be stored within their borders and will lead to efforts to route Internet traffic around the U.S., Bankston said. The NSA's efforts will lead to compromised intelligence-gathering capabilities in the long run as other countries seek to circumvent U.S. services and networks, he said.
"They could very easily kill the goose that laid the golden egg here," he said. "[The NSA has] been placed in a privileged position here because so much data is stored in the U.S., so much data transits the U.S. However, to the extent that it is not clear that we have strong legal standards governing the access to data ... we're going to see that data go away."
The NSA's encryption-defeating efforts will also lower trust in security standards developed through the U.S. National Institute of Standards and Technology (NIST) because of the reports that the NIST helped the NSA tamper with encryption standards, panelists at the encryption forum said.
- 18 Hot IT Certifications for 2014
- CIOs Opting for IT Contractors Over Hiring Full-Time Staff
- 12 Best Free iOS 7 Holiday Shopping Apps
- For CMOs Big Data Can Lead to Big Profits
- Slideshow: 5 ways to lock down your mobile device
- Slideshow: 10 mistakes companies make after a data breach
- How to rob a bank: A social engineering walk through
- Which smartphone is the most secure?
If you think getting it right from day one is always what matters, you probably haven't been following technology too closely.
- IT Certification Study Tips
- Register for this Computerworld Insider Study Tip guide and gain access to hundreds of premium content articles, cheat sheets, product reviews and more.
- Mitigating DDoS Attacks with F5 Technology
- This document examines various DDoS attack methods and the application of specific ADC technologies to block attacks in the DDoS threat spectrum while...
- The DDoS Threat Spectrum
- Bolstered by favorable economics, today's global botnets are using distributed denial-of-service (DDoS) attacks to target firewalls, web services, and applications, often simultaneously.
- Defending Against Denial of Service Attacks
- By utilizing end-user interviews, this whitepaper explores a deeper understanding of DDoS defense plans and reveals the knowledge gaps around the Denial of...
- Strategic Solutions for Government IT
- This paper outlines why F5 is the optimum partner to help achieve the levels of security, performance and availability that are vital to...
- Armed and Dangerous: Help your IT Organization Embrace Enterprise Mobility
- Becoming a mobile enterprise means new opportunities for your organization yet letting employees choose their own devices and then access corporate resources, apps,... All Government IT White Papers
- Modernizing SAP environments with minimum risk - a path to Big Data Hear from top IDC analyst, Richard Villars, about the path you can start taking now to enable your organization to get the benefits...
- Fighting Fraud Videos: IBM Intelligent Investigation Manager Short videos about IBM Intelligent Investigation Manager (IIM) for Fraud. IIM optimizes the investigation of fraud for customers across many industries in both...
- IBM Intelligent Investigation Manager: Online Product Demo Intelligent Investigation Manager optimizes fraud investigation and analysis and it dynamically coordinates and reports on cases, provides analysis and visualization, and enables more...
- Webinar: IBM IIM for Fraud, Abuse and Waste in Government View this IBM webinar to learn about the challenges and opportunities in fraud reduction, waste, and abuse in government programs and agencies. You...
- Pre-Engineered solutions from VCE Simplify Core Infrastructure Implementation In this video, the CTO of Purdue Pharma, a privately held pharmaceutical company explains how Purdue transformed their data center infrastructure with VCE.
- All Government IT Webcasts
Does your organization offer extensive benefits, cool perks, competitive salaries, opportunities for training and advancement? Then get it recognized!
Nominate your company or another deserving organization for Computerworld's 2014 Best Places to Work in IT list now through Dec. 12, 2013.