[INFOCON] - News 09/20/02
_ London, Friday, September 20, 2002 _ INFOCON News _ IWS - The Information Warfare Site http://www.iwar.org.uk _ IWS Sponsor IQPC Defence Conference: Information Operations 2002 25-26/09/02 Information Operations 2002: Analysing development in defensive and offensive information operations, critical infrastructure protection, information assurance and perception management. September 25 - 26, 2002. London, UK (Pre-Conference Masterclass: 24th September 2002) Information Operations 2002 Conference Web Site http://www.iqpc-defence.com/GB-1826 _ [News Index] [1] President's Cyber Man seeks Framework support [2] US .gov info restricted over attacker fears [3] Administration official defends cyberspace security plan [4] Creation of e-gov office praised [5] Info Industry Debates E-Privacy [6] (UK) National surveillance centre suffers delay [7] Fighting Back: Dissatisfied Online Shoppers Take Action [8] Security: Stop ignoring the obvious mistakes [9] A cybersage speaks his mind [10] FBI still not reaching out to local law enforcement, police expert says [11] Experts say White House protocol upgrade advice is serious [12] Homeland's 1st goal: Be different [13] Crypto-chip boosts ID security [14] A Bounty on Spammers [15] Open-source group gets Sun security gift [16] Linux rootkit hacker suspect arrested in UK [17] Sun Offers Building Blocks for Liberty Alliance Applications _ News _ [1] President's Cyber Man seeks Framework support By ComputerWire Posted: 20/09/2002 at 06:28 GMT The US president's internet security advisor hit the streets yesterday seeking industry input into a proposed cyber security framework. Richard Clarke's first stop was Sun Microsystems Inc's Networks conference in San Francisco, California, where he appealed to delegates for feedback on the document. The government has worked with major industrial sectors to produce 70 proposals it believes will secure America's critical infrastructure against attack. Members of the public have two months to submit feedback on the proposal. Initial feedback this week called the document useful because it does not mandate action. However, some believe the proposed framework also lacks teeth. http://www.theregister.co.uk/content/55/27211.html [2] US .gov info restricted over attacker fears By ComputerWire Posted: 20/09/2002 at 06:26 GMT VeriSign Inc has stopped providing access to information about the .gov internet domain, which is restricted to US government bodies, over concerns the data could be used in planning internet attacks, ComputerWire has learned. On September 16, the company posted a notice on its web site saying that from September 13 (three days earlier) it would no longer provide FTP access to the so-called "zone file" for .gov, which contains the IP addresses of all the name servers that point to .gov domains. http://www.theregister.co.uk/content/55/27210.html [3] Administration official defends cyberspace security plan By Drew Clark, National Journal's Technology Daily SEATTLE- The Bush administration official responsible for the details of the National Strategy to Secure Cyberspace responded late Wednesday to critics who argued that the plan does too much or not enough to protect the nation's critical computer networks. The report "is not a full-blown tactical implementation plan," Howard Schmidt told National Journal's Technology Daily in a telephone interview after the formal unveiling of the report at Stanford University. Schmidt is vice chairman of the President's Critical Infrastructure Protection Board and was the top liaison with the technology industry on the plan. Both Schmidt and Richard Clarke, the top White House cybersecurity adviser, stressed at the launch that the report is a "draft" subject to a 60-day comment period. An earlier version was tagged a "strategy of how the United States will take steps to secure [critical] information technology networks." Schmidt also said that the president has not yet seen the plan. http://www.govexec.com/dailyfed/0902/091902td1.htm
[INFOCON] - News 09/20/02
_ London, Tuesday, August 20, 2002 _ INFOCON News _ IWS - The Information Warfare Site http://www.iwar.org.uk _ InfowarCon 2002: Homeland Defense and Cyber-Terrorism, Washington, DC September 4-5, 2002, optional workshops September 3 & 6. Presented by MIS Training Institute and Interpact, Inc. Proven strategies for protecting against threats to critical infrastructures and government systems. Go to: http://www.misti.com/08/iw02nl27inf.html _ [News Index] [1] White House to launch Web site for government, industry tech experts [2] Cybersecurity should be kept in civilian hands [3] Report says DOE cut security by 40 percent over decade, sites hacked several times [4] PGP is Here to Stay [5] Privacy fear over plan to store email [6] Intelligence agencies use extra funds for hiring [7] Cyberterrorism Concerns IT Pros [8] NIPC seeks cyberalert support [9] Wireless hackers take to the air [10] Gut-feeling out of touch in IT security decisions [11] Sprint Security Faulted in Vegas Hacks [12] How Al Qaeda Slipped Away [13] Abu Nidal, Palestinian Terrorist Leader, Is Reported Dead [14] Study: AOL's got unhappy customers [15] Robbie wins web battle [16] KDE fixes SSL hole as MS dithers [17] The Stuckist Net - what is your post-Palladium future? _ News _ [1] White House to launch Web site for government, industry tech experts By Molly M. Peterson, National Journal's Technology Daily PHILADELPHIA -- The White House plans to launch a Web site that would enable government and private-sector technology experts to exchange ideas for better information-sharing practices, the Office of Homeland Security's chief information officer announced in Philadelphia Monday. "I need your help," Steven Cooper told more than 900 high-tech professionals from 32 states during a keynote address at a three-day homeland security conference. "We can't get a view of America from inside the Beltway. ... We don't know it all. We've got to hear from everybody." Cooper said the Web site would enable high-tech firms and agencies at all levels of government to share their "best practices" for data fusion and integration with the Office of Homeland Security. He noted that the Sept. 11 terrorist attacks prompted communities in many states-including Pennsylvania, Texas, Minnesota, Utah and California-to launch information-sharing initiatives that have proven effective and that might be worth implementing nationwide. http://www.govexec.com/dailyfed/0802/081902td1.htm [2] Cybersecurity should be kept in civilian hands By Whitfield Diffie and Susan Landau, 8/18/2002 n the wake of Sept. 11, we're all agreed on the need to protect critical infrastructure - telecommunications, electric power, transportation, banking, and finance. We also know much of that infrastructure depends on the Internet, so cybersecurity will be a critical concern of the proposed Department of Homeland Security. The only question: How best to achieve it? http://www.boston.com/dailyglobe2/230/business/Cybersecurity_should_be_kept_in_c ivilian_hands+.shtml [3] Report says DOE cut security by 40 percent over decade, sites hacked several times By ROBERT GEHRKE The Associated Press 8/20/02 2:37 AM WASHINGTON (AP) -- The number of guards protecting nuclear materials and facilities nationwide has been slashed by 40 percent, jeopardizing their security, a Democratic lawmaker says. Rep. Ed Markey of Massachusetts released Energy Department figures Monday showing that between 1992 and 2001 DOE whittled its security forces from 7,091 employees to 4,262. http://www.nj.com/newsflash/washington/index.ssf?/cgi-free/getstory_ssf.cgi?a043 8_BC_NuclearSecurity&&news&newsflash-washington [4] PGP is Here to Stay By Dennis Fisher Crypto fans take heart, PGP is here to stay. A group of venture capitalists and veteran high-tech executives on Monday announced the formation of a new company called PGP Corp. that has purchased Network Associates Inc.'s remaining PGP assets and released PGP 8.0, a new version of the beloved