DHS-Supported Scans of Private Networks Prompt Suspicions of Domestic Surveillance
A new Department of Homeland Security-supported information security service that scans private sector networks could expand domestic surveillance, civil liberties groups say, citing documents associated with the activity. Under the "Enhanced Cybersecurity Services" program, DHS feeds government intelligence about network threats to approved Internet Service Providers so they can immunize corporate subscribers. The program, made available nationwide last June, is voluntary. Now, DHS has announced a new service under the program that ISPs can offer called "netflow analysis."
A November 2015 privacy impact assessment of the added feature is short on details about what kind of customer information may be shared with the government, and critics have spotted loopholes that, they say, may allow the National Security Agency to spy on Internet users. Andy Ozment, assistant secretary for DHS cybersecurity and communications, said in a Jan. 26 blog post the new function will allow ISPs "to more effectively identify and analyze malicious activity transiting their customers’ networks.” The participating providers currently include AT&T, CenturyLink, Lockheed Martin and Verizon.