U.S. Cybersecurity’s Multiple System Safeguards

Published in Sohu
(China) on 19 April 2011
by Ren Haijun (link to originallink to original)
Translated from by Howard Segal. Edited by Nathan Ladd.
If you were to say that using six full-time cyber security institutions and more than 130 laws and regulations wasn’t enough to maintain American cyber security, then in the past two years, by establishing the White House Cybersecurity Office and the National Telecommunications and Network Security Control and Joint Coordination Center, the Obama administration has proven that it is committed to cyber security at the highest levels.

Additionally, the administration is focused on establishing a national cyberspace policy assessment panel that publishes reports every year; fully implementing a national cyber security comprehensive plan in order to meet all types of cyber threats; holding multi-part coordination exercises responding to network threats; and broaching the concept of cyber warfare. The importance with which the Obama administration considers cyber security can be seen in its frequent moves over the past two years for safeguarding.

Cyber Security is a Matter of Vital National Importance to the United States

The main American Internet regulation—the Telecommunications Law—mentions the interests that America needs to guarantee: national security, minors, intellectual property rights and computer security. National security goes without saying, and intellectual property and computer security are directly related to the internet industry’s core interests in America. Minors are the country’s future—their growth is related to the healthy development of society.

However, are these interests mentioned above secure? American cyber security expert Richard Clarke believes the high degree of informatization is, instead, America’s great weakness. Cyber criminals will run wild, and there will be a greater flood of damaging information.

In reality, once the American network system comes under attack, the consequences will be extremely grave. For example, the hacking incident which occurred in America on February 7, 2000 paralyzed eight large websites for 24 to 72 hours, and three days of losses amounted to over $1 billion. In 2005, the banking information of 40 million MasterCard customers, one of America’s largest credit card companies, was obtained by hackers and led to the largest American credit card user information leak case. In May 2006, an incident of data theft occurred at the U.S. Department of Veterans Affairs, involving the personal information of more than 200 million service members, National Guard members and reservists.

According to an American news report, the United States Congress, most government departments, companies and universities, and, in fact, any organization with any links to the Internet and that has information worth stealing and destroying, have all become the targets of hacking attacks. FBI Director Robert Mueller said at a cyber security conference last year: “Some in the industry have likened this to ‘death by a thousand cuts.’ We are bleeding data, intellectual property, information, and source code, bit by bit, and in some cases, terabyte by terabyte.”

In addition, American web sites with extreme images and pornographic content have spread unchecked, induced several incidents of terrorism and adolescent assaults that have led to feelings of societal unrest.

Harvard University professor and founder of the “soft power” theory, Joseph Nye, also wrote in late January of this year in the New York Times that for the United States up until now, the greatest damage has consisted of cyber espionage and various cyber crimes, but, that in the next ten years or so, cyber war and cyber terrorism could become an even greater threat.

The Obama administration is well aware that this is a weakness for America in an Internet age. Obama believes cyber security has already become one of the most severe national economic and national security challenges facing America.

“Strengthening Response” is the U.S. Government’s Only Option

Realistically, as far as maintaining cyber security goes, the U.S. government already has many responsible departments—there are six specialized cyber security agencies: the U.S. Computer Emergency Response Team under the Department of Homeland Security, the U.S. Cyber Command under the Department of Defense, the National Cyber Investigative Joint Task Force under the FBI, the Intelligence Community Incident Response Center under the Office of the Director of National Intelligence, the Cyberspace Security Threat Operations Center under the National Security Agency, and the Defense Cyber Crime Center in the Department of Defense.

Nevertheless, can the intelligence and technology of these organizations be shared? In a crisis, just how will a response be coordinated? The Internet industry is still rapidly developing, the ranks of internet users are growing, and network cases are frequent, which have all made Obama feel that the United States has not yet made full preparations to respond to cyber security challenges.

Consequently, not long after Obama took office, he established the Cyberspace Policy Review panel to thoroughly assess the security situation and response capabilities of the information and communication infrastructure. He then adopted the recommendations offered in the review panel’s Cyberspace Policy Review Report, such as establishing a close relationship with the president’s White House Cybersecurity Coordinator, establishing a White House Cybersecurity Office and coordinating the U.S. federal government’s military and civilian sectors cyber security policies and actions.

In late 2009, the United States set up the National Telecommunications and Cybersecurity Joint Coordinating Center, whose main function is to coordinate and integrate the information of the six specialized cyber security agencies and provide cross-domain network spaces to develop trends, judge capabilities, analyze and report the country’s cyberspace operational status.

During the Obama administration, the Comprehensive National Cybersecurity Initiative, which former President Bush signed, should also be implemented. This plan contains a series of mutually reinforcing policy measures intended to strengthen future cyberspace security by setting up and improving the federal government’s internal network and threat and security awareness. With the cooperation of all government levels and the private sector, the plan will also reduce vulnerability and prevent the ability of invasion. The government also organized coordinated exercises at all levels of the government to deal with cyber attacks.

In combating the crime of internet child pornography, the U.S. federal government will undoubtedly play a leading role. Many departments have established specialized agencies or have launched special projects to combat the crime of child pornography. For example, the Department of Justice funded the establishment of a special task force to combat child pornography and enlisted state and local governments to provide technology, equipment and personnel support.

By introducing laws and regulations, establishing advanced network coordination management agencies, assessing the cyber security situation, formulating a response plan and even holding related exercises, the United States is improving American cyber security and safeguarding national interests.


多重机制维护下的美国网络安全

新华网华盛顿4月18日电(记者任海军)六大网络安全专职机构、130多项法律法规,如果说,用这些来维护美国的网络安全还不够,那么近两年来,成立“白宫网络安全办公室”、“全国通信与网络安全控制联合协调中心”,则是奥巴马政府从国家最高层面维护网络安全的战略考量。
  这些还不算,成立国家级的“网络空间政策评估小组”,每年发布报告;全面实施《国家网络安全综合计划》,以应对各类网络威胁;举行应对网络威胁的多部门协同演习;引入网络战概念。奥巴马政府这两年维护网络安全的动作频频,其对网络安全的重视可见一斑。
  “网络安全”事关美国重大国家利益
  美国主要的互联网法规《电信法》提出了美国需要确保的利益:国家安全、未成年人、知识产权及计算机安全。国家安全自不必说,而知识产权和计算机安全直接涉及美国的支柱性利益互联网产业。未成年人则是国家的未来,他们的成长事关社会健康发展。
  然而上述的这些利益都安全么?美国网络安全专家理查德·克拉克认为,信息化程度高反而是美国的一大弱点,网络犯罪会更猖獗,有害信息会更泛滥。
  事实上,美国的网络系统一旦受到攻击,其后果非常严重。例如,美国2000年2月7日发生的黑客事件,使8大网站瘫痪24至72小时,3天总损失高达10亿美元以上;2005年,美国最大信用卡公司之一的万事达公司4000万用户的银行资料被黑客获得,酿成美国最大规模信用卡用户信息泄密案;2006年5月,美国退伍军人事务部发生资料失窃事件,涉及200多万军人、国民警卫队队员及预备役人员的个人信息。
  据美国媒体报道,美国国会、政府大多数部门、企业和大学事实上,任何与互联网有联系、有值得窃取和破坏的信息的组织都成为黑客攻击的目标。美国联邦调查局局长罗伯特·米勒去年曾在一个网络安全会议上表示,“一些业内人士将这种情况比作凌迟。我们在一点一点地失去数据、知识产权、信息和源代码,在某些情况下,失去的数据难以估量”。
  此外,美国网站一些极端言论和色情内容一度泛滥,诱发了多起恐怖主义事件和青少年被侵害案件,更引发了社会不安定情绪。
  美国哈佛大学教授、“软实力”理论首倡者约瑟夫·奈今年2月底也在《纽约时报》撰文表示,对美国而言,目前最大的损失是网络间谍行为和各类网络犯罪所造成的,但未来10年左右,网络战和网络恐怖主义可能成为更大的威胁。
  对美国在互联网时代的弱点,奥巴马政府心知肚明。奥巴马认为,网络安全已成为美国国民经济和国家安全所面临的最为严峻的挑战之一。
  “加强应对”是美国政府不二选择
  事实上,在维护网络安全方面,美国政府已有多家部门负责,政府下属有六大网络安全专职机构,即美国计算机应急响应小组,隶属国土安全部;联合作战部队全球网络行动中心,隶属国防部;国家网络调查联合任务小组,隶属联邦调查局;情报界网络事故响应中心,隶属国家情报总监办公室;网络空间安全威胁行动中心,隶属于国家安全局;国防网络犯罪中心,隶属国防部。
  然而,这些机构的情报和技术能共享吗?遇到危机,到底如何协调应对?互联网产业仍在飞速发展,网民队伍不断扩大,网络案件频发,这些都使奥巴马感到,美国尚未做好应对网络安全挑战的充分准备。
  于是,奥巴马上任后不久,就成立了“网络空间政策评估小组”,以彻底评估信息和通信基础设施的安全防护状况及应对能力。他随后采纳了评估小组提交的《网络空间政策评估报告》中的建议,如设立与总统保持密切联系的“白宫网络安全协调员”,并成立“白宫网络安全办公室”,协调美国联邦政府的军事和民事部门网络安全政策和行动。
  2009年底,美国还成立了“全国通信与网络安全控制联合协调中心”,主要工作就是协调和整合六大网络安全专职机构的信息,以提供跨领域的网络空间发展趋势判断能力,分析并上报全国网络空间的运行状况。
  在奥巴马政府任内,前总统布什签署的《国家网络安全综合计划》也得以充分实施。这一计划包含一系列相辅相成的政策措施,其目标是通过建立和提高联邦政府内部对网络漏洞、威胁和安全事故风险的认识,最终通过各级政府和私营部门的合作,提高全社会采取果断行动、减少漏洞并预防入侵的能力,强化未来网络空间安全。政府还组织过各级政府和多部门协同的应对网络攻击演习。
  在打击儿童网络色情犯罪的工作中,美国联邦政府无疑起主导作用,多个部门成立了专门机构或启动专门项目打击儿童色情犯罪。例如,司法部出资成立打击儿童网络犯罪特种部队,为各州和地方有关行动提供技术、设备和人力支持。
  从出台法律法规,设立高级网络协调管理机构,到评估网络安全状况,制定应对计划乃至举行有关演习,美国正用多重机制维护着美国的网络安全和国家利益。
This post appeared on the front page as a direct link to the original article with the above link .

Hot this week

Austria: Donald Is Disappointed in Vladimir

Germany: It’s Not Europe’s Fault

Mexico: Urgent and Important

Poland: Marek Kutarba: Donald Trump Makes Promises to Karol Nawrocki. But Did He Run Them by Putin?

Austria: If This Is Madness, There is a Method to It

Topics

Austria: The US Courts Are the Last Bastion of Resistance

       

Poland: Marek Kutarba: Donald Trump Makes Promises to Karol Nawrocki. But Did He Run Them by Putin?

El Salvador: The Game of Chess between the US and Venezuela Continues

Austria: Donald Is Disappointed in Vladimir

Austria: If This Is Madness, There is a Method to It

Germany: It’s Not Europe’s Fault

Germany: Donald Trump’s Failure

Canada: No, the Fed Was Not ‘Independent’ before Trump

Related Articles

Germany: It’s Not Europe’s Fault

Spain: State Capitalism in the US

Thailand: Appeasing China Won’t Help Counter Trump

India: Will New US Envoy Help to Repair Ties under Threat?

France: Global South: Trump Is Playing into China’s Hands