US lifts lid on top secret plan for internet security
By Maggie Shiels
Technology reporter, BBC News, San Francisco
Mr Schmidt called for new partnerships on cybersecurity The White House has declassified parts of a top secret plan outlining how government will protect the nation's computer networks from cyber warfare. The announcement by cybersecurity tsar Howard Schmidt was made at the world's biggest security event. The move is aimed at encouraging greater co-operation between academia, government and the private sector. "We have to fully recognise the importance cybersecurity has in our lives," Mr Schmidt said. "We must continue to seek out innovative new partnerships - not only within government, but also among industry, government and the American public," he told delegates at the event, hosted by the security company RSA in San Francisco. It was his first major speech to industry peers since being appointed to the job in December 2009. The Comprehensive National Cybersecurity Initiative (CNCI) was introduced in 2008 by then-President George W Bush. Going public There are 12 parts to the CNCI, including cyber counterintelligence and deterrence strategies. For the first time the government has published a general description of what they are on its website. The aim of the programme is threefold: to establish a front line of defence against today's immediate threats
to defend against the full spectrum of threats
to strengthen the future cybersecurity environment The CNCI funds a number of sensitive projects including the government's Einstein technology, which focuses on securing the vast computer network that operates under the dot.gov domain, as well as detecting attempts to access those systems. The president has likened threats to the internet to that of a nuclear attack The document acknowledges that traditional security approaches have fallen short, but says the federal government is moving forward in outlining "grand challenges" for the research community to help solve. Mr Schmidt said the declassification would show that the government has a workable strategy for protecting the nation's computer systems in the event of a cyber attack. Parts of the initiative that deal with the nation's offensive plans for cyberwarfare have not been made public. 'Common sense' Reaction to the announcement ranged from caution to praise. One supporter is Michael Markulec, chief operating officer for Lumeta, a company that provides large organisations and government agencies with secure network solutions. "This move brings more people to the table - organisations like mine that play in the cybersecurity space, experts here at the RSA who are currently not involved in discussions because they have been at a classified level inside the government. "So this allows more people to play and given that 85% of the critical infrastructure is not in government hands, it certainly makes sense to include the rest of the expertise," Mr Markulec told BBC News. Hilton Collins of Government Technology Magazine agrees. "The private sector has so much knowledge, power and money that for them to help the government innovate more technology security solutions is the right way to go." The Electronic Privacy Information Centre (Epic), which had demanded the full text of the CNCI, said it was pleased about the declassification. However the group said it still wanted to see the full document and what privacy safeguards are in place when assessing cyber threats.
Bookmark with: Delicious
Digg
reddit
Facebook
StumbleUpon What are these? E-mail this to a friend Printable version
United States Department of Homeland Security as the lead agency protecting Information technology. 
The United States announced the declassification of a portion of the Comprehensive National Cybersecurity Initiative, a major part of the US's efforts to thwart cyber warfare, on Tuesday.

The announcement came at the RSA Security Conference in San Francisco, and was given by Howard Schmidt, who is the current US cyber-security coordinator, having been assigned the position in December.  

While only a portion of the document was revealed at the announcement, and much remains classified material, including all material related to plans by the government for offensive cyber-warfare, the program has twelve parts, and has three main strategies:

*To create a defensive mechanism against immediate threats, as well as those possible in the near future;
*To create a defensive mechanism against a wide variety of threats, both present and future;
*To initiate efforts to strengthen future cyber-security efforts.

The program includes funding for numerous security measures, including the government's controversial Einstein program, which scans all incoming communications to government-operated websites. The plan also mentions increasing security for classified networks within the government, as well as developing a government-wide plan for counter-intelligence work, although the declassified portions gave little indication as to what that would involve. 

The program was begun by President George Bush in 2008 as a National Security Presidential Directive, and has been entirely classified until now.  At its inception, it was intended to serve as a program to unify cyber-security efforts within the government and to develop other security programs for use nationwide.  No budget has been released for the program, although estimates place the cost at $40 billion until 2015.