Bush's Budget Repart Cybersecurity Mistakes

Again, as per usual, our source is Center for American progress

Bush’s Budget Repeats Cybersecurity Mistakes

By Peter Swire

The president’s budget allocates $6 billion for a secretive system that is designed to protect government and private computer systems from attack. According to the Wall Street Journal, the White House proposal “would likely require the government to install sensors on private, company networks.”

This proposal repeats the mistakes of the Federal Intrusion Detection Network, which proposed similar monitoring of private computer systems when it was proposed in 1999. That aspect of FIDNet was quickly withdrawn, for at least three good reasons:

1. Private companies are understandably reluctant to permit the government to attach unknown hardware or software to their corporate systems. The risks of security breach and operational problems are too high, especially given the long history of computer security failures by the federal agencies themselves.

2. Direct federal intervention in private computer systems raises innumerable legal and policy issues about privacy, the Fourth Amendment, and the scope of government surveillance.

3. The new proposal ignores the sensible principles for cybersecurity that were adopted in the wake of the FIDNet fiasco and built into the Federal Computer Incident Response Center. Quite simply, the federal government should adopt best security practices that apply to private systems.

Under this approach, the federal government should adopt state-of-the-art intrusion detection software and other measures for its own systems to combat intrusions into federal systems. The federal government should not, however, try to install its equipment into private systems.

Peter Swire is a Senior Fellow at the Center for American Progress and a professor at the Moritz College of Law of the Ohio State University. To speak with him please contact:

For TV, Sean Gibbons, Director of Media Strategy 202.682.1611 or sgibbons@americanprogress.org
For print or radio, John Neurohr, Press Assistant 202.481.8182 or jneurohr@americanprogress.org
For web, Erin Lindsay, Online Marketing Manager 202.741.6397 or elindsay@americanprogress.org