Cyberdefense: Should Americans be concerned about their privacy?
The Pentagon continues to beat the drum of potential cyberwar. As US cybersecurity deteriorates with the rise of unwelcome attacks on US military networks, Defense Secretary Leon Panetta has dubbed cyberspace 鈥渢he battlefield of the future.鈥�
But in the midst of the Pentagon鈥檚 preparation for this next generation of war, critics have raised concerns about just how this bolstering of network defenses might impact the privacy of everyday US citizens.
Several new bills before Congress seek to increase information-sharing among government departments, among them the National Security Agency, the entity responsible for electronic eavesdropping.
Will these new cyberdefense initiatives mean that the NSA will, say, stockpile the private e-mails of Americans?
These fears have not been allayed by the ongoing construction of a sprawling new NSA data center 鈥� to the tune of 100,000 square feet of computer banks on 240 acres 鈥� at Camp Williams, Utah.
This week, Gen. Keith Alexander, the head of US Cyber Command, made an effort to reassure an audience at the conservative American Enterprise Institute that cybersecurity and the protection of privacy are not mutually exclusive.聽
He also said that the NSA鈥檚 new data center would not 鈥渉old data on US citizens鈥� or pour over the e-mails of Americans. 鈥淲e won鈥檛 do that,鈥� he said, calling such speculation 鈥渂aloney.鈥�
Gen. Alexander sought to elaborate on this point. 鈥淭hey're not reading your e-mail per se,鈥� he explained. 鈥淭hey're looking at the stream of data that's coming in ... looking for signatures or ports or different types of activity.鈥�
This is a valid point, says James Lewis, director of the Technology and Public Policy Program at the Center for Strategic and International Studies. 鈥淭he information that would be shared is 鈥榦nes and zeros,鈥� 鈥� he says 鈥� in other words, numbers that point to malicious codes. 鈥淭here鈥檚 very little personal information in this code,鈥� Mr. Lewis says.
For those who remain skeptical, Alexander pointed to the sheer numbers. 鈥淚f you think about just the volume of US emails 鈥� just think statistically ... we're talking about, you know, probably 30 trillion emails a year or more. Anybody read 30 trillion 鈥� think about how that is.鈥�
Indeed, while the historic problem in espionage has been collecting data, Mr. Lewis points out, it is now storing and sorting it.聽
鈥淚 tell people, 鈥業f you think about terrorism, China, weapons of mass destruction, Russia, Iran, Pakistan, North Korea, where do you fit into that list?鈥� Lewis says. 鈥淚f you鈥檙e not doing something that involves that, they don鈥檛 have time to be looking at you.鈥�
That said, it鈥檚 understandable that Americans remain suspicious, given America鈥檚 legacy of unauthorized wiretaps, Lewis says.
鈥淭he big problem is still, unfortunately, the Bush warrantless wiretap program that created such a huge level of distrust, particularly in the privacy community.鈥� For that reason, 鈥渙f course it鈥檚 reasonable to be suspicious,鈥� he adds. 鈥淭he NSA can鈥檛 go to people and say, 鈥楾rust me.鈥� 鈥�
Alexander for his part warned, too, of the difficulty of managing the demands for privacy versus the need to respond quickly in the face of a cyberattack.
鈥淚t's like a missile coming into the United States. If you think about a missile coming into the United States, there is two things you could do. We could take the snail mail approach and say, 鈥業 saw a missile going overhead,鈥� 鈥� he told the AEI audience.聽
鈥淣ow, cyber is at the speed of light. I'm just saying we perhaps ought to go a little faster 鈥� probably don't want to use snail mail,鈥� he ventured. 鈥淢aybe we could do this in real time and come up with a construct that you and the American people know that we're not looking at civil liberties and privacy 鈥� we're actually trying to figure out when the nation is under attack and what we need to do about it.鈥�
