Report: Problems stymie U.S. cyberspy protection
Twin obstacles of technical problems and privacy issues are holding back the overarching system created to protect the federal government's computers from cyberspies, according to The Wall Street Journal.
"The latest complete version of the system, known as Einstein, won't be fully installed for 18 months, according to current and former officials, seven years after it was first rolled out," the newspaper reports. "This system doesn't protect networks from attack. It only raises the alarm after one has happened."
The privacy concerns stem from the National Security Agency's acknowledgment of its warrantless wiretapping of phone calls and e-mail that started after the terrorist attacks of September 11, 2001. AT&T is supposed to test new Einstein technology, but the Journal reported that the company sought Justice Department's approval first. The Obama administration has OK'd the testing, an official told the newspaper.
According to the Journal, these are the three phases of the Einstein program:
• Einstein 1: Monitors Internet traffic flowing in and out of federal civilian networks. Detects abnormalities that might be cyberattacks. Is unable to block attacks.• Einstein 2: In addition to looking for abnormalities, detects viruses and other indicators of attacks based on signatures of known incidents, and alerts analysts immediately. Also can't block attacks.
• Einstein 3: Under development. Based on technology developed for a National Security Agency program called Tutelage, it detects and deflects security breaches. Its filtering technology can read the content of e-mail and other communications.
The Department of Homeland Security began work on the project in 2003, adapting it from a Pentagon program that watched military networks, former national security officials told the Journal.
A Homeland Security representative told the Journal the phases are "incremental improvements" that also safeguard privacy and civil liberties. "We don't want to let the perfect be the enemy of the good," the representative told the newspaper.
Homeland Security is the only department using Einstein 2 at this point, the newspaper said, but it is expected to cover most of the government in another 18 months.
Natalie Weinstein is an associate editor who works out of Austin, Texas. She spent a decade as a reporter and editor in the newspaper industry before joining the CNET News staff in 2000. E-mail Natalie. 
- by Lerianis3 July 5, 2009 5:31 PM PDT
- The fact is that NO ONE will be able to totally prevent intrusions into computer systems. The best thing that can be done is to have VERY LIMITED PERMISSIONS on some things (if not putting them on totally non-net connected computers) in order to do some proactive security.
- Like this Reply to this comment
-
(4 Comments)