January 2015

Information Security and Privacy Advisory Board

National Institute of Standards and Technology
Department of Commerce
Wednesday, February 11, 2015, from 8:30 a.m. until 5 p.m. Eastern Time
Thursday, February 12, 2015, from 8:30 a.m. until 5 p.m. Eastern Time
Friday, February 13, 2015, from 8:30 a.m. until 12 p.m. Eastern Time
http://www.gpo.gov/fdsys/pkg/FR-2015-01-02/pdf/2014-30780.pdf

The agenda is expected to include the following items:

  • Updates on OMB Circular No. A–130 Revised, Management of Federal Information Resources,
  • Updates from the U.S. Digital Service Team,
  • Discussion on ContinuousMonitoring and Continuous Diagnostics and Mitigation (CDM),
  • Discussion and Presentation on drones and privacy,
  • Updates on NIST Privacy Engineering Objectives and Risk Model Discussion draft,
  • Updates on Cybersecurity Framework—Improving Critical Infrastructure Cybersecurity, Executive Order 13636,
  • Updates on Legislation, Federal Information Security Management Act,
  • Presentation from U.S. Department of Justice Cybersecurity Unit,
  • Presentation from National Security Agency (NSA) Privacy Officer,
  • Updates from U.S. Chief Technology Officer,
  • Updates on NIST Cryptographic Standards and Guidelines Development Process, and
  • Updates on NIST Computer Security Division


American Enterprise Institute
Wednesday, January 21, 2015
12:00 pm - 12:45 pm
http://www.aei.org/events/federal-communications-commission-2015-convers...

Agenda

11:45 AM Registration and lunch

12:00 PM Remarks
Mike O’Rielly, Federal Communications Commission

12:30 PM Q&A
Moderator:
Jeffrey Eisenach, AEI

12:45 PM
Adjournment

Event Contact Information
For more information, please contact Evelyn Smith at Evelyn.Smith@aei.org, 202.862.5891.

Media Contact Information
For media inquiries, please contact MediaServices@aei.org, 202.862.5829



Get ready: The FCC says it will vote on network neutrality in February

The Federal Communications Commission will vote on new proposed network neutrality rules in February. FCC Chairman Tom Wheeler told fellow FCC commissioners before the holidays that he intends to circulate a draft proposal internally in February with an eye toward approving the measure weeks later, said one official who spoke on the condition of anonymity because the agency's deliberations are ongoing.

The agency is scheduled to hold its monthly meeting on Feb. 26. The rules are meant to keep broadband providers such as Verizon and Comcast from speeding up or slowing down some Web sites compared to others. Analysts and officials close to the agency say that momentum has been building recently for far more aggressive regulations than Chairman Wheeler had initially proposed.

US: No alternate leads in Sony hack

A briefing for FBI agents investigating the Sony Pictures hack by a security firm that says its research points to laid-off Sony staff, not North Korea, as the perpetrator provided no usable new evidence. The news that the FBI had taken the three-hour briefing added to the chorus of well-qualified skeptics who said the unprecedented decision to release details of an ongoing FBI investigation and President Barack Obama publicly blaming North Korea hasn’t convinced the cybersecurity community.

Apparently, after the three-hour meeting, law enforcement concluded that the company’s analysis “did not improve the knowledge of the investigation.” “The FBI has concluded the government of North Korea is responsible for the theft and destruction of data on the network of Sony Pictures Entertainment. Attribution to North Korea is based on intelligence from the FBI, the US intelligence community, the Department of Homeland Security, foreign partners and the private sector,” an FBI spokeswoman said. “There is no credible information to indicate that any other individual is responsible for this cyber incident.”

[Dec 29]

US Says North Korea Sanctions Step 1 in Sony Response

The United States says its new round of sanctions against North Korea is just the opening salvo in its response to an unprecedented cyberattack on Sony.

Yet there may be little else the US can do to further isolate a country that already has few friends in the world. Even the latest sanctions, handed down by President Barack Obama in an executive order, may not sting quite as badly as US would have hoped. After all, North Korea is already under a strict sanctions regime imposed by the US over the North's nuclear program. The new round of sanctions unveiled Jan 2 hit three organizations closely tied to the North's defense apparatus, plus 10 individuals who work for those groups or for North Korea's government directly. Any assets they have in the US will be frozen, and they'll be barred from using the U.S. financial system. But all three groups were already on the US sanctions list, and officials couldn't say whether any of the 10 individuals even have assets in the US to freeze.

If the Supreme Court tackles the NSA in 2015, it’ll be one of these five cases

2015 is likely to be a big year for privacy policy, as 2014 saw a handful of the national security and surveillance-related civil and criminal cases stemming fully or partially from the Snowden/National Security Agency documents advance far enough through the legal system. One or more of the cases could even end up before the Supreme Court.

"I think it's impossible to tell which case will be the one that does it, but I believe that, ultimately, the Supreme Court will have to step in and decide the constitutionality of some of the National Security Agency's practices," said Mark Rumold, an attorney with the Electronic Frontier Foundation. Rumold is one of the attorneys in First Unitarian Church, a case that is challenging government surveillance much like Klayman v. Obama. Along with that pair, headline watchers should set alerts for cases such as American Civil Liberties Union (ACLU) v. Clapper, United States v. Moalin, and United States v. Muhtorov. Not only are there several other related cases that will likely be influenced by these decisions, but those five cases represent the strongest and most direct legal challenges to the current NSA surveillance state.

[Jan 1]

Judiciary presses FBI on cellphone spying

The leaders of the Senate Judiciary Committee are pressing the Obama Administration for more information about a program that collects Americans’ cellphone data using technology that mimics cellular towers.

Committee Chairman Patrick Leahy (D-VT) and Ranking Member Chuck Grassley (R-IA) revealed that the FBI recently changed its legal policy when seeking court approval to deploy the technology. "We are concerned about whether the FBI and other law enforcement agencies have adequately considered the privacy interests of other individuals who are not the targets of the interception," they wrote in the letter addressed to Attorney General Eric Holder and Homeland Security Department Secretary Jeh Johnson. While the updated policy now requires a search warrant, both Senators expressed concern about exceptions to that rule. The letter does not outline the previously legal policy or when, specifically, it changed. The FBI does not need a warrant to deploy the technology, the Senators noted, if the case involves imminent danger, a fugitive or if the technology is used in public places where there is "no reasonable expectation of privacy."

[Dec 31]

The Trouble With Sweeping Questions About the Internet

[Commentary] Confusion about the Internet’s role is endemic in today’s public sphere. And that’s in part because we keep asking the wrong questions. The wrong kind of question asks whether the Internet can cause positive social change. Unless you define “the Internet” as the technology together with everyone who uses it, the Internet is an inanimate tool, just a communication channel.

The Internet is not, nor will ever be, the primary, systematic cause of real political change any more than lanterns -- “one if by land, two if by sea” -- were the primary cause of the American revolution. “Can technology X cause social change Y?” Answer “yes” and you’ve granted technology more agency than it has; answer “no” and you’re denying that technology has any role to play. These questions are loaded, because the key issue isn’t about technology at all but, rather, “What social, economic, and political conditions would change people en masse?"

[Toyama is the W.K. Kellogg Chair Associate Professor at the University of Michigan School of Information]

This was the Internet’s worst, best year ever

[Commentary] 2014 was in many ways a mixed bag for the Internet. It showed the Internet at its strongest, reaching more people, more ways than at any point in the past. But at the same time, it has also never been more threatened by everything from hackers to censors to autocrats newly attuned to the power of the online world.

Some key pieces of information: 32 of 65 countries surveyed in 2014 had declines in their Internet freedom. Even democracies abused the Internet, revealing a global "schizophrenic attitude" towards surveillance according to a report from the group Reporters Without Borders. However, the number of regular Internet users grew by about 250 million people in just the last 12 months. Overall, the fact that people seemed to have never been more passionate about the fate of the Internet is, perhaps, the one main lesson from this past year in the Internet's life.

[Dec 31]

North Dakota leads nation in fiber optic access

North Dakota leads the nation in high-speed fiber optic access to the Internet, according to a US Department of Agriculture report.

“We have made it a priority to deploy a high-speed Internet network throughout the state,” said Jasper Schneider, acting administrator for the USDA’s rural utilities service. “As a result, North Dakota is once again leading the way and has a plan for statewide coverage.” The 15 telecommunications companies that make up the Dakota Carrier Network have put 40,000 miles of fiber optics in the ground, bringing high-speed broadband capability to every corner of the state, said Seth Arndorfer, CEO of the Dakota Carrier Network. “Our network is bringing gigabit-capable broadband services to hundreds of business locations,” he said. The report shows that the Dakota Carrier Network invested $100 million per year for the past decade into fiber optic infrastructure.

[Dec 29]