About InfoWorld : Advertise : Subscribe : Contact Us : Awards : Events : Store
InfoWorld HomeNewsTest CenterOpinionsProduct GuideTechIndex
 COLUMN ARCHIVE  FORUMS
 

COLUMN

 
Security Adviser
P.J. Connolly

Federal insecurities

IF YOU BELIEVE everything you read, the U.S. government's Web sites are going to be the next Pearl Harbor. Headlines scream, "Feds Under Attack," and members of Congress have another excuse to hold hearings and lay the groundwork for their presidential ambitions. Recent reports of the three-year-long Moonlight Maze attack against government systems (purportedly coming from Russia, but nobody's certain) -- as well as various Web site defacements from the "cyberwar" between Chinese and U.S. hackers following the recent tussle over the downed surveillance plane -- seem to justify these claims.

   ADVERTISEMENT
  

Free IT resource

Virtualization Insights from Top Experts - Learn how virtualization gets real!

Sponsored by Dell

Free IT resource

TechNet: More ways to know it, share it, and keep it running.

Sponsored by Microsoft

RELATED LINKS
»  IE 7 bug reopens debate over patch responsibilities
»  Woman ordered to pay for file-sharing will appeal
»  McAfee to buy SafeBoot for $350M
»  Security RSS feed 

IDG ENTERPRISE NETWORK
Research Reports  (CIO)
Ask the Expert  (CIO)

TOP NEWS 


IT SOLUTION SEARCH
Obviously, it doesn't make the Feds look good when they can't control their own Web sites. It doesn't help that in late May the government's General Accounting Office (GAO) released its finding that the National Infrastructure Protection Center (NIPC) was severely understaffed, due in part to the Secret Service's resentment of the FBI's oversight of the NIPC. (At least, that's the conclusion I came to after reading the GAO's testimony before a Senate subcommittee.) Maybe a change is in order. Having followed the attempts of law enforcement to cope with computer crime, I have more respect for the tasseled folks from Treasury than the Fibbies in their wing tips, so perhaps the Secret Service will do a better job of running NIPC.

No matter who's minding the store, NIPC has some fundamental problems that won't go away soon. The top of the list is staffing; it's really hard to convince experienced computer security people to pass up good-paying jobs in the private sector for the rigors of life inside the Beltway and the insultingly low pay of the civil service schedules. Maybe by charging enough 13-year-olds with hacking into school servers, a sort of digital chain gang can be recruited. But that idea stopped being funny when a kid in New Jersey hung himself after his principal threatened him with jail.

A second problem may prove to be just as difficult. A lot of people don't like the U.S. government and what it stands for, and that doesn't depend on who's in the White House. By hacking, they're engaging in a form of nonviolent protest, which is something most people support until the street they're driving down (or the Web site they need) is blocked by a demonstration. To the Man, of course, they're committing all sorts of felonies and misdemeanors and are more dangerous to society than are rapists and thieves. But no matter which position you support -- I personally don't see the point of prison time unless you're trying to turn a casual criminal into a career one -- it's clear that the U.S. government is one of the most attractive targets on the Internet. If the people managing government Web sites forget that fact, then they're asking to be embarrassed.


P.J. Connolly (pj_connolly@infoworld.com) covers networking and security for the Test Center and believes that "good enough for government work" isn't. Get this column free via e-mail each week. Sign up at www.iwsubscribe.com/newsletters .




RELATED SUBJECTS

Security

MORE >


SPONSORED WHITE PAPERS
EMC - Lower costs and improve reliability-Get the EMC CLARiiON white paper!
Ciphertrust - Are you ready for Sobig.G? Learn how to protect your email systems.
CDW - Personal attention. CDW. The Right Technology. Right Away.
EMC - Explore key performance features and capabilities of EMC ControlCenter 5.1.1.
Intel - Free Intel white paper shows you how to deploy a secure wireless LAN
Cisco - FREE WHITE PAPER: BLUEPRINT to design and implement secure VPNs
Verity, Inc. - "Mass Consolidation Hits the Web-Search Market"
McDATA - Download a FREE storage consolidation white paper from McDATA(R).
Lucent Technologies - Overcoming Common Firewall Limitations
Lucent Technologies - Leverage Your Mobile High Speed Data Access. Download Free White Paper!
Nokia - Get the scoop! Mobilizing business white papers & case studies.
BMC Software - Maximize the Potential of Enterprise Data: Free white paper!
Network Associates - Free white paper - Strategies for Optimizing Network Costs and Benefits
Entrust - Manage identities across applications. Improve productivity.
Stalker Software - CommuniGate Pro - Transform your Email and Calendaring
Remedy - A NEW Gartner Research Note:Producing Quality IT Services

Search the IDG White Paper Library:


SPONSORED LINKS

INFOWORLD MARKETPLACE


» IT Compliance Conference: Nov. 5-7 in San Diego
Best Practices, Peer Experiences, & Expert Advice for Building a Defensible IT Compliance Program
» FREE Sophos Threat Detection Test
Is your AV catching everything it should? Free virus, spyware and adware scan.
» IT Audit Checklists
Prepare for your next internal IT audit. Checklists cover security, risk management, PCI, and more.
» FREE White Paper: Mitigating Rock Phish Attacks
Standard anti-phishing methods cannot defeat complex Rock Phish attacks. Learn how to fight back...
» Apply BPM and ITIL at your IT Help Desk
ServiceWise brings BPM to complete IT service while eliminating integration cost. Learn more here.




 HOME  NEWS  TEST CENTER  OPINIONS  PRODUCT GUIDE  TECHINDEX   About : Advertise : Subscribe : Contact Us : Awards : Events 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy

All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses, phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

Computerworld :: Network World :: CIO :: PC World :: Darwin :: CMO :: CSO
IT Careers :: JavaWorld :: Macworld :: Mac Central :: Playlist :: GamePro :: GameStar :: Gamerhelp
ITWorld Canada :: Computerwoche :: Techworld UK :: tecChannel :: IDG.se :: IDG.no