The Attacks on GRC.COM
Nothing more than the whim of a 13-year old hacker is required to knock any user, site, or server right off the Internet.
I believe you will be as fascinated and concerned as I am by the findings of my post-attack forensic analysis, and the results of my subsequent infiltration into the networks and technologies being used by some of the Internet's most active hackers.
Wednesday, July 04, 2001
Microsoft Does Not Understand Security
With a bit of horror, I learned that Microsoft's developers have no understanding of security.
With a bit of horror, I learned that Microsoft's developers have no understanding of security.
Spy Suspect Hanssen to Plead Guilty
Trying to close the books on an espionage debacle that rocked the FBI, the government struck a deal with ex-agent Robert Hanssen that would spare his life in exchange for a full confession detailing secrets he sold the Russians, people familiar with the case said Tuesday.
Trying to close the books on an espionage debacle that rocked the FBI, the government struck a deal with ex-agent Robert Hanssen that would spare his life in exchange for a full confession detailing secrets he sold the Russians, people familiar with the case said Tuesday.
Spy Agency Reveals Some, Not All
Hidden along Route 32, in a drab beige building that looks every bit the cheap motel it once was, is America's official museum of secrets.
Hidden along Route 32, in a drab beige building that looks every bit the cheap motel it once was, is America's official museum of secrets.
Sunday, July 01, 2001
Windows 2000 Security Recommendation Guides
NSA has developed and distributed configuration guidance for Microsoft Windows NT in the form of NT configuration guides. These guides are currently being used throughout the government and by numerous entities as a security baseline for their NT systems.
To assist our Windows 2000 user community, NSA has developed security configuration guidance for Windows 2000, with the cooperation of the other government agencies and industry partners who provided their expertise and extensive technical review. The configuration guides for Microsoft Windows 2000 are being posted on the NSA web site and are presented in three parts: ".inf" files, configuration guides, and supporting documents.
Wednesday, June 27, 2001
Echelon Spy System
The Croatian NSEI System is Based on the American Spy System ‘Echelon’.
The Nacional Central Electronic Reconnaissance system (NSEI) is the most powerful and most secretive part of Croatia’s intelligence system. In the last ten years, massive financial resources have been invested in this system. As a specially organized unit of the Office for National Security (UNS), this system is responsible for monitoring all connections with countries outside of Croatia’s borders, as well as for monitoring all connections within Croatia which have any association with terrorist acts, intelligence or with directed attempts to destroy the constitutional system.
The monitoring system automatically turns itself on and records any telephone conversations when key words are mentioned, such as explosive, bomb, package, president, minister and others. The American system ‘Echelon’ operates in a similar, albeit much more complex and vast way throughout the world.
The Croatian NSEI System is Based on the American Spy System ‘Echelon’.
The Nacional Central Electronic Reconnaissance system (NSEI) is the most powerful and most secretive part of Croatia’s intelligence system. In the last ten years, massive financial resources have been invested in this system. As a specially organized unit of the Office for National Security (UNS), this system is responsible for monitoring all connections with countries outside of Croatia’s borders, as well as for monitoring all connections within Croatia which have any association with terrorist acts, intelligence or with directed attempts to destroy the constitutional system.
The monitoring system automatically turns itself on and records any telephone conversations when key words are mentioned, such as explosive, bomb, package, president, minister and others. The American system ‘Echelon’ operates in a similar, albeit much more complex and vast way throughout the world.
In-Q-Tel
In-Q-Tel is dedicated to developing information technology for the CIA that is commercially available, affordable, and supported. In-Q-Tel seeks technology that enables the gathering of accurate, comprehensive and timely foreign intelligence in the interest of national security.
Email snooping almost banned
A cluster of new laws will soon come into effect curbing companies' rights to snoop through workers' emails.
Workers sending personal email across the corporate pipeline will gain a little more protection than they have at present but privacy advocates warn that it won't be a lot.
A cluster of new laws will soon come into effect curbing companies' rights to snoop through workers' emails.
Workers sending personal email across the corporate pipeline will gain a little more protection than they have at present but privacy advocates warn that it won't be a lot.
WWW.huh?: You Are the First Line of Defense
Defense Department computer security systems and specialists foiled nearly 22,500 would-be intruders in 1999 and 24,500 in 2000. There's no let-up in sight.
Sigaba Updates Email Encryption Gateway
Sigaba announced the availability of the its Email Encryption Gateway (SEEG) version 2.0. Enhancements include compatibility with the proposed Advanced Encryption Standard (AES), expanded desktop email encryption support and interoperability with Sigaba Courier. Sigaba Courier is an HTML-based product for use with SEEG version 2.0 that allows users to open Sigaba encrypted email, without the need to download any additional software.
Sigaba announced the availability of the its Email Encryption Gateway (SEEG) version 2.0. Enhancements include compatibility with the proposed Advanced Encryption Standard (AES), expanded desktop email encryption support and interoperability with Sigaba Courier. Sigaba Courier is an HTML-based product for use with SEEG version 2.0 that allows users to open Sigaba encrypted email, without the need to download any additional software.
Hampton, New Hampshire Man Convicted and Sentenced for Hacking into Former Employer's Computer Server
McKenna, who was fired by Bricsnet on Friday, October 20, 2000, hacked into his former employer’s computer server on two occasions. The first time was the evening of Friday, October 20, 2000, the day he was fired. The second was the following morning, Saturday, October 21, 2000. McKenna remotely accessed the computer server of his former employer, via the Internet, without authorization and caused damage in four ways: 1) he deleted approximately 675 computer files; 2) he modified computer user access levels; 3) he altered billing records; and, 4) he transmitted E-mails, which purported to have originated from an authorized representative of the victim corporation, to over one hundred (100) clients. Those E-mails contained false statements about business activities of the corporation.
McKenna, who was fired by Bricsnet on Friday, October 20, 2000, hacked into his former employer’s computer server on two occasions. The first time was the evening of Friday, October 20, 2000, the day he was fired. The second was the following morning, Saturday, October 21, 2000. McKenna remotely accessed the computer server of his former employer, via the Internet, without authorization and caused damage in four ways: 1) he deleted approximately 675 computer files; 2) he modified computer user access levels; 3) he altered billing records; and, 4) he transmitted E-mails, which purported to have originated from an authorized representative of the victim corporation, to over one hundred (100) clients. Those E-mails contained false statements about business activities of the corporation.
New Encryption and Decryption drafts
The W3C released initial drafts of XML Encryption Syntax and Processing and Decryption Transform for XML Signature.
The W3C released initial drafts of XML Encryption Syntax and Processing and Decryption Transform for XML Signature.
Study: Interactive TV Could Be 'Spy in Your Home'
A new report from the Center for Digital Democracy (CDD) warns that the privacy concerns of the Internet will be magnified by interactive television (ITV), as technology makers and marketers turn the living room into a laboratory and track everything from income to favorite color.
San Angelo, Texas: Home of Spies
Thanks to neighboring Goodfellow Air Force Base, this isolated West Texas city of 87,000 may harbor more spies, ex-spies and future spies per capita than any place in America, save Washington, D.C.
Thanks to neighboring Goodfellow Air Force Base, this isolated West Texas city of 87,000 may harbor more spies, ex-spies and future spies per capita than any place in America, save Washington, D.C.
Sunday, June 24, 2001
Statement for the Record for the Joint Economic Committee Cyber Threat Trends and US Network Security
In 2015 we anticipate that the world will almost certainly experience quantum leaps in information technology (IT) and in other areas of science and technology. IT will be the major building block for international commerce and for empowering nonstate actors. Most experts agree that the IT revolution represents the most significant global transformation since the Industrial Revolution beginning in the mid-eighteenth century.
Friday, June 22, 2001
Really Secure E-Mail
To be an effective business tool, e-mail must be controlled so that messages are secure and misuse is minimized. Here, we look at two products for doing just that: One uses digital rights management (DRM) and the other, acceptable usage policy (AUP).
To be an effective business tool, e-mail must be controlled so that messages are secure and misuse is minimized. Here, we look at two products for doing just that: One uses digital rights management (DRM) and the other, acceptable usage policy (AUP).
Russian Computer Hacker Indicted in California for Breaking into Computer Systems and Extorting Victim Companies
A federal grand jury today indicted a Russian computer hacker on a host of federal charges for allegedly breaking into computer systems, stealing credit card information and attempting to extort payments from the victim companies for "computer security services."
Wednesday, June 20, 2001
The Emperor's Codes: The role of Bletchley Park in breaking Japan’s secret ciphers
American hi-jacking of history did not start with the film U-571, as Michael Smith makes clear in this sequel to Station X, his revelations about the pivotal role of GCHQ’s Bletchley Park codebreakers in winning the Hitler war. While Alan Turing and his fellow boffins were applying their mathematical genius exclusively to cracking codes like the U-boats’ ‘Shark’ – in line with the Anglo-American agreement to give the European war theatre precedence – the US Navy’s cryptographers were effectively denying their British opposite numbers vital information on the war in their own Pacific ‘preserve’.
American hi-jacking of history did not start with the film U-571, as Michael Smith makes clear in this sequel to Station X, his revelations about the pivotal role of GCHQ’s Bletchley Park codebreakers in winning the Hitler war. While Alan Turing and his fellow boffins were applying their mathematical genius exclusively to cracking codes like the U-boats’ ‘Shark’ – in line with the Anglo-American agreement to give the European war theatre precedence – the US Navy’s cryptographers were effectively denying their British opposite numbers vital information on the war in their own Pacific ‘preserve’.
Monday, June 18, 2001
SANSFIRE
Welcome to SANSFIRE, a SANS conference with an emphasis on Forensics, Investigation, Response and Education. SANS has a tradition of offering theme based conferences to meet special needs of the defensive information community. Often, bringing security workers with a common problem together will result in a number of breakthroughs. Perhaps you recall SANS ID’99, the seminal gathering leading to the advanced intrusion detection techniques we employ today. Now, perhaps you are asking, “why do we need a forensics conference”?What do you do when you detect an unknown pattern on the network? When you see outbound packets leaving your system, how do you determine what process is causing the activity? If your disk light starts flashing furiously and you aren’t running anything, how do you check it out? When the boss directs you to toss one of the organization’s computer systems, how do you go about doing it? System, security, and network administrators need tools and techniques to face these challenges.
We will offer case studies that illustrate exactly how various tools and processes solved common problems, mini-tutorials on seizure, evidence collection, system and network forensics, data recovery, and product selection. Preceding the Technical Program we will offer five days of leading edge, in-depth courses taught by the highest rated teachers in the world, including leaders in forensics.
Sunday, June 17, 2001
NSA Releases Win2K Security Recommendation Guidelines
The US National Security Agency (NSA) has released a set of guidelines and templates to assist in securing Windows 2000 systems. The materials contain 5 templates to use with Microsoft's Security Configuration Editor, 17 guides to secure various aspects of the OS, and 3 supporting documents with indepth defense coverage and particulars about various popular software packages.
The templates include configuration settings for domain controllers (DCs), domain policy, and server and workstation settings. The guides are available in Adobe Portable Document Format (PDF) and cover a broad range of topics, including network architecture, Group Policy, file and disk resources, Encrypting File System (EFS), DNS, Active Directory (AD), Microsoft IIS, Kerberos, public key infrastructure (PKI), Windows NT and 9x clients, Outlook, and routers.
The US National Security Agency (NSA) has released a set of guidelines and templates to assist in securing Windows 2000 systems. The materials contain 5 templates to use with Microsoft's Security Configuration Editor, 17 guides to secure various aspects of the OS, and 3 supporting documents with indepth defense coverage and particulars about various popular software packages.
The templates include configuration settings for domain controllers (DCs), domain policy, and server and workstation settings. The guides are available in Adobe Portable Document Format (PDF) and cover a broad range of topics, including network architecture, Group Policy, file and disk resources, Encrypting File System (EFS), DNS, Active Directory (AD), Microsoft IIS, Kerberos, public key infrastructure (PKI), Windows NT and 9x clients, Outlook, and routers.
Friday, June 15, 2001
Information Operations
The AOC is on the front lines of an undeclared information war. The defense of Army networks across the world is imperative. It is obvious that no “out-of-the-box” security tool will suffice to protect the integrity of the Army’s digital domain. Consequently, Army network managers need to do a lot more in terms of Enclave Site Defense. For guidance, they can turn to the Army’s standard doctrine. A shown in this paper, defending a network enclave is not much different than defending a hilltop in the jungle. The same principles of war apply. As seen in FM 100-5, the Army does not rely on weapon systems alone to guarantee success on the battlefield. Instead, commanders deploy weapons systems in conjunction with some time-honored tactics that favor offensive over defensive operations. The same should be true for Enclave Site Defense. Defending a site is more than just deploying the weapon systems. It is also about detecting the attack and reacting to it. This paper will discuss these very issues.
The AOC is on the front lines of an undeclared information war. The defense of Army networks across the world is imperative. It is obvious that no “out-of-the-box” security tool will suffice to protect the integrity of the Army’s digital domain. Consequently, Army network managers need to do a lot more in terms of Enclave Site Defense. For guidance, they can turn to the Army’s standard doctrine. A shown in this paper, defending a network enclave is not much different than defending a hilltop in the jungle. The same principles of war apply. As seen in FM 100-5, the Army does not rely on weapon systems alone to guarantee success on the battlefield. Instead, commanders deploy weapons systems in conjunction with some time-honored tactics that favor offensive over defensive operations. The same should be true for Enclave Site Defense. Defending a site is more than just deploying the weapon systems. It is also about detecting the attack and reacting to it. This paper will discuss these very issues.
Computerworld Resource Center: Security
Computer World's Security site with a lot of articles. Good reading!
Hacking Into Wall Street
On March 10, 2000, the Nasdaq reached an all-time high, breaking the 5000 mark for the very first time. Internet Trading Technologies (ITTI) wasn't participating in the market upswing, however. The company was too busy working to fend off an online attack.
Hacking threat rises with layoffs
When someone cracked Slip.net's computer system, altered customer accounts and deleted important databases, the Internet service provider didn't need to look far to find the attacker.
It wasn't a criminal outfit seeking credit card numbers, and it wasn't a scrawny whiz kid hacking away for a challenge in his dark bedroom.
It was Nicholas Middleton, a former computer administrator for Slip.net, who had been unhappy at the San Francisco company and recently quit. Middleton fought the resulting criminal charges on a legal technicality but lost and got three years' probation.
When someone cracked Slip.net's computer system, altered customer accounts and deleted important databases, the Internet service provider didn't need to look far to find the attacker.
It wasn't a criminal outfit seeking credit card numbers, and it wasn't a scrawny whiz kid hacking away for a challenge in his dark bedroom.
It was Nicholas Middleton, a former computer administrator for Slip.net, who had been unhappy at the San Francisco company and recently quit. Middleton fought the resulting criminal charges on a legal technicality but lost and got three years' probation.
U.S. Considered Sharing Security Secrets With China, Syria, Pakistan
Newly declassified documents show that America considered sharing secret computer security code "keys" with foreign powers including China, Syria and Pakistan.
The documents include a secret 1993 CIA cable on the "Clipper" project, a computer security chip developed by the U.S. government. The Clipper chip contained advanced "key recovery" surveillance technology, allowing the government to secretly tap phone conversations and monitor computer communications.
Newly declassified documents show that America considered sharing secret computer security code "keys" with foreign powers including China, Syria and Pakistan.
The documents include a secret 1993 CIA cable on the "Clipper" project, a computer security chip developed by the U.S. government. The Clipper chip contained advanced "key recovery" surveillance technology, allowing the government to secretly tap phone conversations and monitor computer communications.
HoneyNet Project
The Honeynet Project is a group of thirty security professionals dedicated to learning the tools, tactics, and motives of the blackhat community and sharing those lessons learned. The team collects this information on their own time with their own resources. The primary method for obtaining information is through the use of a Honeynet. It is our hope and intent to develop the security community in the two following ways.
Raise awareness.
To raise awareness of the threats and vulnerabilities that exist in the Internet today. We raise awareness by demonstrating real systems that were compromised in the wild by the blackhat community. Many people believe it can't happen to them. We hope to change their mind.
Teach and inform.
For those in the community who are already aware and concerned, we hope to give you the information to better secure and defend your resources.
Tuesday, June 12, 2001
Pentagon plans to X-out data on old computers
The Pentagon believes it has found a way to give its old computers away to American schools and still protect information locked in the machines' hard drives.
Hackers attempted to breach California power grid
As Californians suffered under rolling blackouts last month, computer hackers were trying to breach the computer system at the California Independent System Operator (Cal-ISO), which oversees most of state's power transmission grid.
As Californians suffered under rolling blackouts last month, computer hackers were trying to breach the computer system at the California Independent System Operator (Cal-ISO), which oversees most of state's power transmission grid.
Foreign spies serious threat to U.S.
A 30-year veteran of the intelligence field says most Americans "almost ignore ... the power of intelligence and counterintelligence" in this country, despite the danger foreign intelligence agents pose to the nation's security.
A 30-year veteran of the intelligence field says most Americans "almost ignore ... the power of intelligence and counterintelligence" in this country, despite the danger foreign intelligence agents pose to the nation's security.
Friday, June 08, 2001
Secure E-Mail Alternatives
E-mail messages sent over the Internet are not private. Messages are sent in readable form, replicated at various points, and then copied whenever backups are made. Clearly, such messages can represent security risks and potential legal liabilities. For those of us who like privacy, finding ways to make e-mail more secure makes sense.
The hi-tech spy
The American spy plane forced to land in China was chock-full of electronic surveillance equipment. Today, espionage is all about who has the best technology.
Thursday, June 07, 2001
Adware, Spyware and Advertising Trojans - Info & Removal Procedures
Adware, Spyware and other unwanted "malware" - and how to remove them.
Adware, Spyware and other unwanted "malware" - and how to remove them.
Osama Bin Laden
This is the Central Intelligence Agency's unclassified fact sheet on Osama bin Laden, the cave-dwelling lunatic suspected of ordering the August bombings of U.S. embassies in Kenya and Tanzania.
This is the Central Intelligence Agency's unclassified fact sheet on Osama bin Laden, the cave-dwelling lunatic suspected of ordering the August bombings of U.S. embassies in Kenya and Tanzania.
Disguise manual
Take a look at this excerpt from a once-secret 1944 manual prepared by the Office of Strategic Services, the predecessor to the CIA. In this chapter, spooks are schooled on quick changes, how to alter your body type, and the use of props. And don't miss the hilarious tips designed especially for the ladies.
Take a look at this excerpt from a once-secret 1944 manual prepared by the Office of Strategic Services, the predecessor to the CIA. In this chapter, spooks are schooled on quick changes, how to alter your body type, and the use of props. And don't miss the hilarious tips designed especially for the ladies.
Lesson 16: Assassinations using poison and cold steel
Here are two excerpts from a 180-page how-to manual that investigators believe has been used by followers of Saudi terrorist Osama bin Laden. The document, "Military Studies in the Jihad Against the Tyrants," was seized last year at the Manchester, England home of a bin Laden disciple. Federal prosecutors in New York recently introduced the 18-chapter manual, written in Arabic, at the trial of four men accused of involvement in the 1998 bombing of U.S. embassies in Kenya and Tanzania (an English translation was also placed in evidence). The terrorism manual offers jihad members detailed pointers on everything from forged documents to kidnapping techniques. TSG may soon post the whole incredible document, but
Here are two excerpts from a 180-page how-to manual that investigators believe has been used by followers of Saudi terrorist Osama bin Laden. The document, "Military Studies in the Jihad Against the Tyrants," was seized last year at the Manchester, England home of a bin Laden disciple. Federal prosecutors in New York recently introduced the 18-chapter manual, written in Arabic, at the trial of four men accused of involvement in the 1998 bombing of U.S. embassies in Kenya and Tanzania (an English translation was also placed in evidence). The terrorism manual offers jihad members detailed pointers on everything from forged documents to kidnapping techniques. TSG may soon post the whole incredible document, but
Wednesday, June 06, 2001
Alternative protection against malicious code
While viruses and online threats have gotten more sophisticated, so have the methods for protecting your PC. Get an inside look at what's available beyond antivirus software.
In this article, I'll discuss the advantages of heuristic software over the pattern-matching approach traditionally employed by antivirus companies, and speculate on what the future may hold for malicious code protection.
While viruses and online threats have gotten more sophisticated, so have the methods for protecting your PC. Get an inside look at what's available beyond antivirus software.
In this article, I'll discuss the advantages of heuristic software over the pattern-matching approach traditionally employed by antivirus companies, and speculate on what the future may hold for malicious code protection.
Spy Vs. Spy
Many who have done business in developing countries where wealth is disproportionate, hostage-taking is common and Americans are always a target, know the value of a couple of bodyguards and an armored escort when driving, no matter how much the service costs.
The main reason why companies budget for physical protection in some locales is a certainty on their part that if they don't defend themselves, the local law won't defend them either.
The same is true on the Internet, where business conditions are probably comparable to working conditions in Uzbekistan or North Korea - the 149th and 155th least-free economies on the planet, according to the 2000 Index of Economic Freedom. But in the last year, a handful of private companies have started to take enforcement into their own hands, quietly developing security units to protect their clients' assets in cyberspace.
Web hosters such as Exodus Communications, Metromedia Fiber Network and ServerVault have been hiring retired agents from the Federal Bureau of Investigation, National Security Agency, Secret Service, Royal Canadian Mounted Police, Scotland Yard, U.S. Army and U.S. Navy, and whisking others away from their govern
Many who have done business in developing countries where wealth is disproportionate, hostage-taking is common and Americans are always a target, know the value of a couple of bodyguards and an armored escort when driving, no matter how much the service costs.
The main reason why companies budget for physical protection in some locales is a certainty on their part that if they don't defend themselves, the local law won't defend them either.
The same is true on the Internet, where business conditions are probably comparable to working conditions in Uzbekistan or North Korea - the 149th and 155th least-free economies on the planet, according to the 2000 Index of Economic Freedom. But in the last year, a handful of private companies have started to take enforcement into their own hands, quietly developing security units to protect their clients' assets in cyberspace.
Web hosters such as Exodus Communications, Metromedia Fiber Network and ServerVault have been hiring retired agents from the Federal Bureau of Investigation, National Security Agency, Secret Service, Royal Canadian Mounted Police, Scotland Yard, U.S. Army and U.S. Navy, and whisking others away from their govern
Tuesday, June 05, 2001
For NSA vet, security's still a hard sell
Bill Crowell has spent his career in security, going from top civilian at the National Security Agency to president and chief executive officer of Cylink Corp., a developer of public-key security systems. But at times, he just can't help being a hacker.
"I used to work where we had a facial recognition system in a briefing center," Crowell recalls. "We didn't have the images bound to the individual with a public key, so I slipped my picture into the file of the guy who did a demo of the system. He . . . couldn't figure out how I kept getting in the door saying I was him."
Bill Crowell has spent his career in security, going from top civilian at the National Security Agency to president and chief executive officer of Cylink Corp., a developer of public-key security systems. But at times, he just can't help being a hacker.
"I used to work where we had a facial recognition system in a briefing center," Crowell recalls. "We didn't have the images bound to the individual with a public key, so I slipped my picture into the file of the guy who did a demo of the system. He . . . couldn't figure out how I kept getting in the door saying I was him."
Death by a thousand flats
There is a building on the south bank of the Thames at Vauxhall Cross, just upstream of the MI6 headquarters, that looks like a new palace for Nicolae Ceausescu. This conspicuously ugly apartment block, better suited to downtown Bucharest than central London, is, however, the product of unbridled western capitalism. "Unbridled" because when you first set eyes on a such a big, garish structure on such an important site, you can't help wondering if anyone in authority stopped to check the reins of this galloping development. Yet the developers - St George plc - faced numerous committees and constraints. They had to come up with a scheme that would meet with the approval of Lambeth council's planners and politicians.
There is a building on the south bank of the Thames at Vauxhall Cross, just upstream of the MI6 headquarters, that looks like a new palace for Nicolae Ceausescu. This conspicuously ugly apartment block, better suited to downtown Bucharest than central London, is, however, the product of unbridled western capitalism. "Unbridled" because when you first set eyes on a such a big, garish structure on such an important site, you can't help wondering if anyone in authority stopped to check the reins of this galloping development. Yet the developers - St George plc - faced numerous committees and constraints. They had to come up with a scheme that would meet with the approval of Lambeth council's planners and politicians.
PGPfone
PGPfone (Pretty Good Privacy Phone) is a software package that turns your desktop or notebook computer into a secure telephone. It uses speech compression and strong cryptography protocols to give you the ability to have a real-time secure telephone conversation via a modem-to-modem connection. It also works across the Internet!
Phone offers military-level security
It used to be that top-secret communication gadgets were reserved for the military and security services.
Now, a German company is selling a cellular phone that offers consumers military-grade privacy.
It used to be that top-secret communication gadgets were reserved for the military and security services.
Now, a German company is selling a cellular phone that offers consumers military-grade privacy.
Saddam RAF secrets fear
One of the RAF's deadliest weapons has been found intact and on public display at Belgrade's Military Museum, raising fears that its secret technology has been compromised.
The Air Launched Anti-Radiation Missile, or Alarm, is one of Nato's best weapons against radar-guided anti-aircraft missile sites. One apparently misfired during the 1999 air operation against Serbia, fluttered down to a marshy area out-side the western Serb village of Nikinci and did not self-destruct.
One of the RAF's deadliest weapons has been found intact and on public display at Belgrade's Military Museum, raising fears that its secret technology has been compromised.
The Air Launched Anti-Radiation Missile, or Alarm, is one of Nato's best weapons against radar-guided anti-aircraft missile sites. One apparently misfired during the 1999 air operation against Serbia, fluttered down to a marshy area out-side the western Serb village of Nikinci and did not self-destruct.
Retired Col.'s Espionage Case Begins
A retired Army reserve colonel was such a valuable spy that when a former Soviet leader was handed a list of his nation's top sources, George Trofimoff was at the top, prosecutors said Tuesday.
A retired Army reserve colonel was such a valuable spy that when a former Soviet leader was handed a list of his nation's top sources, George Trofimoff was at the top, prosecutors said Tuesday.
SORM - Russian Internet Wiretapping Project
Russian FSB (Federal Security Service, successor to KGB) is preparing regulations and technical requirements to facilitate field operative work in computer networks. SORM (in Russian - System for Conduct of Investigations and Field Operations) is a set of regulations and technological equipment facilitating access of FSB to all computer communications and internal documents of telecom providers (including phone and internet companies). The technology provides an effective mechanism to by-pass a Constitutionally required process of court authorization for wire-tapping of electronic communications.
s e c u r i t y w a t c h . c o m
SecurityWatch.com is not just a security portal site, it is the most comprehensive and complete of its kind on the web. SecurityWatch.com provides the latest information on business, technology issues, bugs and product updates. In addition, SecurityWatch.com offers premium services, ranging from access to an extensive Knowledge Base to real world automated electronic vulnerability assessment tools such as recurrent portscans or full audits.
SecurityWatch.com is not just a security portal site, it is the most comprehensive and complete of its kind on the web. SecurityWatch.com provides the latest information on business, technology issues, bugs and product updates. In addition, SecurityWatch.com offers premium services, ranging from access to an extensive Knowledge Base to real world automated electronic vulnerability assessment tools such as recurrent portscans or full audits.
Duncan Campbell
Website of Duncan Campbell, Investigative journalist & TV producer with topics like: 1999 STOA Report on communications intelligence, The original 1988 ECHELON report, British American Tobacco and tobacco smuggling (evidence to the House of Commons, February 2000), British "D Notice" committee close down secret agent web sites, screw the internet ... etc.
Website of Duncan Campbell, Investigative journalist & TV producer with topics like: 1999 STOA Report on communications intelligence, The original 1988 ECHELON report, British American Tobacco and tobacco smuggling (evidence to the House of Commons, February 2000), British "D Notice" committee close down secret agent web sites, screw the internet ... etc.
Interception Capabilities 2000
Report to the Director General for Research of the European Parliament (Scientific and Technical Options Assessment programme office) on the development of surveillance technology and risk of abuse of economic information. This study considers the state of the art in Communications intelligence (Comint) of automated processing for intelligence purposes of intercepted broadband multi-language leased or common carrier systems, and its applicability to Comint targeting and selection, including speech recognition.
Report to the Director General for Research of the European Parliament (Scientific and Technical Options Assessment programme office) on the development of surveillance technology and risk of abuse of economic information. This study considers the state of the art in Communications intelligence (Comint) of automated processing for intelligence purposes of intercepted broadband multi-language leased or common carrier systems, and its applicability to Comint targeting and selection, including speech recognition.
Sunday, June 03, 2001
8th ACM Conference on Computer and Communications Security
The ACM Conference on Computer and Communications Security (CCS) is a forum for the presentation of new research results and the identification of future research directions in the area of computer and communications security.
The ACM Conference on Computer and Communications Security (CCS) is a forum for the presentation of new research results and the identification of future research directions in the area of computer and communications security.
10th USENIX Security Symposium
The field of computer security has a fascinating property: nobody will ever claim that it's a solved problem. Just when we think we have a handle on it, something new and exciting comes along to change the rules and break all the invariants that previously secure systems were depending upon. This symposium addresses cutting-edge concerns ranging from making ordinary programs more robust against attack through protecting whole networks against denial-of-service attacks. Want to verify that your firewall is doing what you think it should be doing? Is your Web site doing client authentication in an insecure fashion? Curious about privacy issues or dealing with law enforcement? Come to the 2001 USENIX Security Symposium and find out about these topics and many more.
CERT® Coordination Center Training and Education
The CERT/CC offers learning opportunities in network computing security through an educational collaboration with Carnegie Mellon University and through our own training courses aimed at private and public sector professionals.
With the Software Engineering Institute (SEI), we offer courses for managers of computer security incident response teams (CSIRTs) and technical experts seeking training in responding to and analyzing computer security incidents, as well as courses for managers and technical personnel who would like to learn practical techniques for improving network security. All courses are held in Pittsburgh, PA, unless otherwise noted.
The CERT/CC offers learning opportunities in network computing security through an educational collaboration with Carnegie Mellon University and through our own training courses aimed at private and public sector professionals.
With the Software Engineering Institute (SEI), we offer courses for managers of computer security incident response teams (CSIRTs) and technical experts seeking training in responding to and analyzing computer security incidents, as well as courses for managers and technical personnel who would like to learn practical techniques for improving network security. All courses are held in Pittsburgh, PA, unless otherwise noted.
The Internet Security Conference
TISC is all about education. TISC is all about the latest products and technology. TISC is all about networking with peers and colleagues. But most of all. TISC is all about SECURITY!
Echelon 'Hampers Virus Detection'
Anti-virus companies have attacked the European Parliament's report on the Echelon spy network which recommends greater use of encryption, warning that encrypted data can hamper virus defence measures.
Anti-virus companies have attacked the European Parliament's report on the Echelon spy network which recommends greater use of encryption, warning that encrypted data can hamper virus defence measures.
International Common Criteria Project Homepage
The Common Criteria represents the outcome of a series of efforts to develop criteria for evaluation of IT security that are broadly useful within the international community.
Friday, June 01, 2001
Statewatch: monitoring civil liberties in the UK and EU
Statewatch News online carries news and reports on civil liberties and EU access to documents with links to background information.
Aegean Park Press
Since 1973, Aegean Park Press has been publishing books that primarily concern the subject of codes and ciphers. Today the Cryptographic Series of Aegean Park Press includes over 80 titles, with new titles being added on a regular basis.
Aegean Park Press also publishes books on a variety of other subjects, including books concerning Mayan Studies, Contract Bridge, Genealogy, and Mathematics.
The founder of the company, Wayne G. Barker, spent 23 years as an intelligence officer. He retired from the U.S. Army in the grade of Lt. Colonel.
Since 1973, Aegean Park Press has been publishing books that primarily concern the subject of codes and ciphers. Today the Cryptographic Series of Aegean Park Press includes over 80 titles, with new titles being added on a regular basis.
Aegean Park Press also publishes books on a variety of other subjects, including books concerning Mayan Studies, Contract Bridge, Genealogy, and Mathematics.
The founder of the company, Wayne G. Barker, spent 23 years as an intelligence officer. He retired from the U.S. Army in the grade of Lt. Colonel.
Robert Philip Hanssen - Alleged KGB "Mole" Within the FBI
Robert Philip Hanssen, subject of this book, was a career Special Agent of the Federal Bureau of Investigation specializing in counterintelligence. For many years the FBI never suspected that Hanssen in reality was a spy for the KGB, the intelligence arm of the Soviet Union, and later the SVR, the KGB's successor.
This story of Robert Philip Hanssen proves that truth is often stranger than fiction. With added photographs the book makes intriguing and fascinating reading and belongs in the library of all who are interested in intelligence and espionage.
Latest Council of Europe Draft Convention on Cybercrime and Explanatory Memorandum of the Convention
On April 27, 2000, the Council of Europe released its draft Convention on Cyber-Crime, which is the first multilateral instrument drafted to address the problems posed by the spread of criminal activity on computer networks. The United States has participated in the drafting of the Council of Europe Convention, which is still a work in progress, since the project began over two years ago. The drafting group is scheduled to complete its work by December 31, 2000, but it continually releases new drafts. The Convention will then be finalized by the Steering Committee on European Crime Problems and submitted to the Committee of Ministers for adoption before it is opened to members of the Council of Europe and observer nations, including the United States, for signature.
On April 27, 2000, the Council of Europe released its draft Convention on Cyber-Crime, which is the first multilateral instrument drafted to address the problems posed by the spread of criminal activity on computer networks. The United States has participated in the drafting of the Council of Europe Convention, which is still a work in progress, since the project began over two years ago. The drafting group is scheduled to complete its work by December 31, 2000, but it continually releases new drafts. The Convention will then be finalized by the Steering Committee on European Crime Problems and submitted to the Committee of Ministers for adoption before it is opened to members of the Council of Europe and observer nations, including the United States, for signature.
Thursday, May 31, 2001
Worldwide spying network is revealed
At last, the leaked draft of a report to be published next week by the European parliament removes any lingering doubt: Echelon, a shadowy, US-led worldwide electronic spying network, is a reality.
At last, the leaked draft of a report to be published next week by the European parliament removes any lingering doubt: Echelon, a shadowy, US-led worldwide electronic spying network, is a reality.
European Parliament urges open source protection against Echelon
A major investigation into the communications spy network says European business and individuals should encrypt all emails - and open source software could hold the key.
A major investigation into the communications spy network says European business and individuals should encrypt all emails - and open source software could hold the key.
How to spot Echelon listening stations
The European Parliament's report into the network that snoops on civilian communications gives some useful clues on how to spot Echelon bases.
The European Parliament's report into the network that snoops on civilian communications gives some useful clues on how to spot Echelon bases.
Monday, May 28, 2001
Wednesday, May 23, 2001
Worm tries to attract surveillance attentionU.K.-based security software vendor Sophos has warned of a new variant on the "Love Bug" worm which, as well as infecting users' machines, seems designed to attract the attention of the "Echelon" surveillance system. Sophos added that it has found just one example of the worm in the wild.
Thursday, May 10, 2001
Conspiracy Theory"In the continuing effort to make China the bogeyman of the 21st century, Washington has scored yet another coup - the loss of the EP-3E Aries II surveillance aircraft. It's very reminiscent of the phony FBI Hanssen Spy Case. In other words, what the US Government is saying just doesn't jibe with the facts.
US NAVY CHARGED WITH CONTINUING COVER-UP.
In 1997, a US Navy intelligence officer was riding in a Canadian Navy helicopter trying to surveil a Russian ship near Seattle that was believed to be collecting intelligence. Both the Canadian pilot and the American officer suffered eye damage caused, they say, by a laser fired from the ship.
This article charges the Navy (ONI) with covering up Russian guilt in the matter and even altering an official photo to help in the cover up -- in order to avoid upsetting US-Russian relations. The matter was more of less hushed up until the US officer, LtCdr Jack Daly, went public 2 or 3 years ago. Since then, he has had career problems and would have been passed over for promotion and forced out of the Navy had not Congress intervened.
In 1997, a US Navy intelligence officer was riding in a Canadian Navy helicopter trying to surveil a Russian ship near Seattle that was believed to be collecting intelligence. Both the Canadian pilot and the American officer suffered eye damage caused, they say, by a laser fired from the ship.
This article charges the Navy (ONI) with covering up Russian guilt in the matter and even altering an official photo to help in the cover up -- in order to avoid upsetting US-Russian relations. The matter was more of less hushed up until the US officer, LtCdr Jack Daly, went public 2 or 3 years ago. Since then, he has had career problems and would have been passed over for promotion and forced out of the Navy had not Congress intervened.
NSA Adviser Says Cyber-Assaults On Pentagon Persist With Few Clues
A series of sophisticated attempts to break into Pentagon computers has continued for more than three years, and an extensive investigation has produced "disturbingly few clues" about who is responsible, according to a member of the National Security Agency's advisory board.
A series of sophisticated attempts to break into Pentagon computers has continued for more than three years, and an extensive investigation has produced "disturbingly few clues" about who is responsible, according to a member of the National Security Agency's advisory board.
The spy left out in the cold
The Russian defector Victor Makarov believes he has been let down by Britain. Now he plans to sue to get his life back
The Russian defector Victor Makarov believes he has been let down by Britain. Now he plans to sue to get his life back
Thursday, March 22, 2001
Improving the Security of Your Site by Breaking Into it
In this paper we will take an unusual approach to system security.
Instead of merely saying that something is a problem, we will look
through the eyes of a potential intruder, and show _why_ it is one. We
will illustrate that even seemingly harmless network services can become
valuable tools in the search for weak points of a system, even when
these services are operating exactly as they are intended to.
In this paper we will take an unusual approach to system security.
Instead of merely saying that something is a problem, we will look
through the eyes of a potential intruder, and show _why_ it is one. We
will illustrate that even seemingly harmless network services can become
valuable tools in the search for weak points of a system, even when
these services are operating exactly as they are intended to.
Tuesday, March 20, 2001
GnuPG (The GNU Privacy Guard)GnuPG is a complete and free replacement for PGP. Because it does not use the patented IDEA algorithm, it can be used without any restrictions. GnuPG is a RFC2440 (OpenPGP) compliant application.
Spammimic
There is tons of spam flying around the Internet. Most people can't delete it fast enough. It's virtually invisible. This site gives you access to a program that will encrypt a short message into spam. Basically, the sentences it outputs vary depending on the message you are encoding. Real spam is so stupidly written it's sometimes hard to tell the machine written spam from the genuine article.
There is tons of spam flying around the Internet. Most people can't delete it fast enough. It's virtually invisible. This site gives you access to a program that will encrypt a short message into spam. Basically, the sentences it outputs vary depending on the message you are encoding. Real spam is so stupidly written it's sometimes hard to tell the machine written spam from the genuine article.
Tripwire
Tripwire is a tool that checks to see what has changed on your system. The program monitors key attributes of files that should not change, including binary signature, size, expected change of size, etc. The hard part is doing it the right way, balancing security, maintanence, and functionality.
Tripwire is a tool that checks to see what has changed on your system. The program monitors key attributes of files that should not change, including binary signature, size, expected change of size, etc. The hard part is doing it the right way, balancing security, maintanence, and functionality.
ShareSniffer, Inc.
Welcome to ShareSniffer.com, home of the wildly popular software program ShareSniffer. Right now—this instant—there are tens of thousands of computers worldwide that are sharing files deliberately with the Internet—requiring no password and no special software other than the Microsoft Windows™ operating system. In testing ShareSniffer, we have discovered files of all types available for copying, viewing or even execution.
Welcome to ShareSniffer.com, home of the wildly popular software program ShareSniffer. Right now—this instant—there are tens of thousands of computers worldwide that are sharing files deliberately with the Internet—requiring no password and no special software other than the Microsoft Windows™ operating system. In testing ShareSniffer, we have discovered files of all types available for copying, viewing or even execution.
SilentRunnerSilentRunner is a passive, multi-functional software tool that monitors network activity in real time, producing a virtual picture of network usage and vulnerabilities.
Cybercrime
Computer Crime and Intellectual Property Section (CCIPS) of the Criminal Division of the U.S. Department of Justice.
Computer Crime and Intellectual Property Section (CCIPS) of the Criminal Division of the U.S. Department of Justice.
International Forum on Surveillance by Design
A one day public meeting on the development of global surveillance strategies for law enforcement and national security.
A one day public meeting on the development of global surveillance strategies for law enforcement and national security.
Intelligence Programs and Systems - Alphabetical Listing
This resource is a comprehensive alphabetical listing of intelligence programs, including both those for which detailed descriptions are available, as well as those for which profiles are not yet available. It is an extremely mixed bag that includes major hardware programs for which extensive profiles are available, medium-sized software implementations which are briefly described, as well as a whole bunch of other cats and dogs which are not and may never be profiled, but whose existence is known and which are included for the sake of completeness and potential future inclusion. In 1993, the Secretary of Defense directed all functional areas to select standard information systems and applications, and eliminate legacy systems. To date, the Department has identified 1,849 information systems, of which functional communities have selected 247 as migration systems. DoD will eliminate at least 1,079 of these legacy systems by the year 2000.
This resource is a comprehensive alphabetical listing of intelligence programs, including both those for which detailed descriptions are available, as well as those for which profiles are not yet available. It is an extremely mixed bag that includes major hardware programs for which extensive profiles are available, medium-sized software implementations which are briefly described, as well as a whole bunch of other cats and dogs which are not and may never be profiled, but whose existence is known and which are included for the sake of completeness and potential future inclusion. In 1993, the Secretary of Defense directed all functional areas to select standard information systems and applications, and eliminate legacy systems. To date, the Department has identified 1,849 information systems, of which functional communities have selected 247 as migration systems. DoD will eliminate at least 1,079 of these legacy systems by the year 2000.
Inside the NSAIt was simpler during the Cold War when the National Security Agency had one major target -- the Soviet Union. Now there are many new targets and problems.
MIL-HDBK-1195 Radio Frequency Shielded Enclosures
Electromagnetic Interference (EMI) is a description of the phenomenon which results from allowing conducted and radiated electrical signals to reach destinations where their presence is undesirable. Uncontrolled EMI may cause computer malfunction or error, detonation of electrically explosive devices, or be the cause for loss of classified information to an enemy. The objective of this handbook is to provide a basic understanding of the problems associated with the acquisition of a facility containing one or more EMI shielded enclosures. It is intended that only the characteristics of the facility that are unusual in comparison to a nonshielded facility will be addressed. This handbook is a brief introduction to EMI shielding theory, and presents basic criteria of importance during the planning, design, and construction of a typical facility containing an EMI shielded enclosure.
Electromagnetic Interference (EMI) is a description of the phenomenon which results from allowing conducted and radiated electrical signals to reach destinations where their presence is undesirable. Uncontrolled EMI may cause computer malfunction or error, detonation of electrically explosive devices, or be the cause for loss of classified information to an enemy. The objective of this handbook is to provide a basic understanding of the problems associated with the acquisition of a facility containing one or more EMI shielded enclosures. It is intended that only the characteristics of the facility that are unusual in comparison to a nonshielded facility will be addressed. This handbook is a brief introduction to EMI shielding theory, and presents basic criteria of importance during the planning, design, and construction of a typical facility containing an EMI shielded enclosure.
Computer ForensicsThe Autopsy Forensic Browser is an HTML based front-end interface to TCT (The Coroners Toolkit ) and TCTUTILs. It allows an investigator to browse forensic images (an image generated from using dd(1)) from a file, inode, or block level abstraction. It also provides a convenient interface for searching for key words on an image.
The President John F. Kennedy Assassination Records Collection
In 1992, the National Archives and Records Administration established the John F. Kennedy Assassination Records Collection pursuant to Public Law 102-526. The Collection contains more than 4 1/2 million pages of assassination-related records, photographs, motion pictures, sound recordings and artifacts.
In 1992, the National Archives and Records Administration established the John F. Kennedy Assassination Records Collection pursuant to Public Law 102-526. The Collection contains more than 4 1/2 million pages of assassination-related records, photographs, motion pictures, sound recordings and artifacts.
Friday, March 02, 2001
The Centre for Counterintelligence and Security Studies The Centre for Counterintelligence and Security Studies (CI Centre) provides advanced and innovative CI and security training, research and analysis for people in the intelligence, national security and defense communities in the US Government as well as for the corporate sector. Espionage, spies and spying activities are in the news everyday. Get a professional, in-depth understanding of the issues and enhance your CI and security awareness by attending our executive-level courses taught by experts retired from the FBI, CIA, Army and KGB.
Wednesday, February 21, 2001
Secure FTP
Data confidentiality. Data integrity. User Authentication. Take away any of these elements and your data is at risk as it travels the Internet. In the past, FTP (File Transport Protocol) was the optimal file transfer utility, but with the real threat of data pirating, you want a mechanism that securely transfers data within your enterprise and between your business partners. Sterling Commerce's CONNECT:Enterprise for UNIX with Secure FTP is an effective, safe, and secure solution for your E-commerce needs.
Data confidentiality. Data integrity. User Authentication. Take away any of these elements and your data is at risk as it travels the Internet. In the past, FTP (File Transport Protocol) was the optimal file transfer utility, but with the real threat of data pirating, you want a mechanism that securely transfers data within your enterprise and between your business partners. Sterling Commerce's CONNECT:Enterprise for UNIX with Secure FTP is an effective, safe, and secure solution for your E-commerce needs.
Tuesday, February 20, 2001
Information Operations URLography by the TNO Physics and Electronics Laboratory (TNO FEL)
Information Warfare (IW) links
Information Warfare (IW) links
Tuesday, February 13, 2001
Pentagon General Counsel Review of Allegations Regarding Dr. John Deutch
In February 2000, the CIA IG provided to the Department a copy of 26 journals (approximately 675 pages of text) that Dr Deutch had maintained during his tenure at DoD. The CIA had located these journals on three Personal Computer Memory Card International Association (PCMCIA) cards which Dr. Deutch had used to store and transfer data from the various computers at his disposal. These journals include Dr. Deutch's detailed descriptions of his daily activities; they focus on his official activities, although they also include many entries of a personal nature. Although the PCMCIA cards may have been authorized for the storage of classified information, the journal entries were entered and worked on from Dr. Deutch's home computers, which were not so authorized.
In February 2000, the CIA IG provided to the Department a copy of 26 journals (approximately 675 pages of text) that Dr Deutch had maintained during his tenure at DoD. The CIA had located these journals on three Personal Computer Memory Card International Association (PCMCIA) cards which Dr. Deutch had used to store and transfer data from the various computers at his disposal. These journals include Dr. Deutch's detailed descriptions of his daily activities; they focus on his official activities, although they also include many entries of a personal nature. Although the PCMCIA cards may have been authorized for the storage of classified information, the journal entries were entered and worked on from Dr. Deutch's home computers, which were not so authorized.
Wednesday, February 07, 2001
Privacy group warns of e-mail wiretap
A newly identified snooping technology allows someone sending an e-mail to see what the recipient wrote when it is forwarded on to another user, an Internet privacy group announced Monday.
A newly identified snooping technology allows someone sending an e-mail to see what the recipient wrote when it is forwarded on to another user, an Internet privacy group announced Monday.
Tuesday, February 06, 2001
THE CASOLARO MURDER & THE FEDS' THEFT OF INSLAW SOFTWARE
The following transcript was made from a broadcast over WBAI-FM 99.5 in New York City on September 20, 1991.
The following transcript was made from a broadcast over WBAI-FM 99.5 in New York City on September 20, 1991.
Cyberspace Wars: Microprocessing vs. Big Brother
Old but interesting, by Daniel Brandt. From NameBase NewsLine, No. 2, July-August 1993
Old but interesting, by Daniel Brandt. From NameBase NewsLine, No. 2, July-August 1993
Saturday, February 03, 2001
The Casolaro files
Prior to being found with his wrists slashed on Aug. 10, 1991 in the bathtub of a Martinsburg, W.Va. motel room, the 44-year Fairfax, Va.
freelance reporter had become obsessed with investigating the "Octopus," a tangle of what he elieved were interconnected conspiracies.
Prior to being found with his wrists slashed on Aug. 10, 1991 in the bathtub of a Martinsburg, W.Va. motel room, the 44-year Fairfax, Va.
freelance reporter had become obsessed with investigating the "Octopus," a tangle of what he elieved were interconnected conspiracies.
Wednesday, January 10, 2001
Fact Sheet: Counterintelligence for the 21st Century (PDD --)President Clinton signed a Presidential Decision Directive (PDD) entitled "U.S. Counterintelligence Effectiveness – Counterintelligence for the 21st Century." The PDD outlines specific steps that will enable the U.S. counterintelligence (CI) community to better fulfill its mission of identifying, understanding, prioritizing and counteracting the intelligence threats faced by the United States. The system will be predictive, proactive and will provide integrated oversight of counterintelligence issues across the national security agencies.
Overview GlobalSecurity.org is focused on innovative approaches to the emerging security challenges of the new millennium
NEW CLASSIFICATION CATEGORY FOR NUCLEAR INFO PROPOSED
Officials of the Departments of Energy and Defense have proposed
establishing a new classification category to provide enhanced protection
for some of the nation's most sensitive nuclear weapons information.
The proposal is the culmination of the "higher fences" initiative that
began during the tenure of Energy Secretary Hazel O'Leary and which called
for increasing security for the most sensitive information. The new
proposal also responds to controversy over the adequacy of protection of
classified nuclear information that arose following the loss of hard drives
containing sensitive data at Los Alamos last year.
The new classification category -- dubbed Sigma 16 -- would apply generally
to "design specifications that permit the reproduction ... of the complete
nuclear assembly system..." and to documents that contain "an aggregation
of design information ... that provides comprehensive insight into nuclear
weapon capabilities, vulnerabilities, or design philosophies."
The proposal for the new classification category was presented in the
"Report of the Joint Policy Group for the Protection of Nuclear Weapons
Design and Use Control Information," dated December 1, 2000. A copy of the
report was obtained by Secrecy News and is posted here:
http://www.fas.org/sgp/othergov/doe/joint_report.html
Most or all of the affected information is already classified at the Secret
Restricted Data level. DOE and DoD officials considered a proposal to
upgrade the information to Top Secret RD, but rejected this option as too
expensive and unwieldy.
Instead, they recommended creating a new classification category that would
entail increased protection -- including, for example, more rigorous
background investigations for access approval -- even though the
information would remain at its present Secret RD classification level.
The new classification category, Sigma 16, represents an addition to the
existing Sigma 1 through Sigma 15 classification scheme. These are subsets
of classified nuclear weapons information (classified under the Atomic
Energy Act) that are grouped by subject matter.
The definitions of each of the Sigma categories used by the Department of
Energy may be found here:
http://www.fas.org/sgp/othergov/doe/sigmas.html
In a separate move, DOE late last month approved the upgrading of 12 topics
from Confidential Restricted Data to Secret Restricted Data.
Officials of the Departments of Energy and Defense have proposed
establishing a new classification category to provide enhanced protection
for some of the nation's most sensitive nuclear weapons information.
The proposal is the culmination of the "higher fences" initiative that
began during the tenure of Energy Secretary Hazel O'Leary and which called
for increasing security for the most sensitive information. The new
proposal also responds to controversy over the adequacy of protection of
classified nuclear information that arose following the loss of hard drives
containing sensitive data at Los Alamos last year.
The new classification category -- dubbed Sigma 16 -- would apply generally
to "design specifications that permit the reproduction ... of the complete
nuclear assembly system..." and to documents that contain "an aggregation
of design information ... that provides comprehensive insight into nuclear
weapon capabilities, vulnerabilities, or design philosophies."
The proposal for the new classification category was presented in the
"Report of the Joint Policy Group for the Protection of Nuclear Weapons
Design and Use Control Information," dated December 1, 2000. A copy of the
report was obtained by Secrecy News and is posted here:
http://www.fas.org/sgp/othergov/doe/joint_report.html
Most or all of the affected information is already classified at the Secret
Restricted Data level. DOE and DoD officials considered a proposal to
upgrade the information to Top Secret RD, but rejected this option as too
expensive and unwieldy.
Instead, they recommended creating a new classification category that would
entail increased protection -- including, for example, more rigorous
background investigations for access approval -- even though the
information would remain at its present Secret RD classification level.
The new classification category, Sigma 16, represents an addition to the
existing Sigma 1 through Sigma 15 classification scheme. These are subsets
of classified nuclear weapons information (classified under the Atomic
Energy Act) that are grouped by subject matter.
The definitions of each of the Sigma categories used by the Department of
Energy may be found here:
http://www.fas.org/sgp/othergov/doe/sigmas.html
In a separate move, DOE late last month approved the upgrading of 12 topics
from Confidential Restricted Data to Secret Restricted Data.
Tuesday, January 09, 2001
Smart LoggerSmart Logger - multi-channel digital voice logging and monitoring system with embedded noise cancellation, fax-decoding and transcription modules.
Tuesday, January 02, 2001
Introduction to EncryptionThere is no one single way to encrypt a file. Hundreds of ciphers exist today and many more are being developed every year. Some can be done with nothing more than a pencil and a piece of paper, while others require the number-crunching power of a computer to be effective and practical. In this article, Joshua Ryder presents some basic examples to illustrate how encryption works.
Subscribe to:
Posts (Atom)
