STUDY MANUAL   COUNTER INTELLIGENCE  PROLOGUELN324
The purpose of this booklet is to present basic information on the mission and activities of Counter Intelligence. But, with the understanding that the primary mission is to support the commanders of the armed forces. This booklet is dedicated to the concepts of Counter Intelligence in relation with its functional areas, the application of these functions, and a specific dedication and instructions on how to apply these functions. The terms "special agent of Counter Intelligence" (SA) refers to all those persons who conduct and contribute to the handling and gathering of information of the
multi-disciplinary intelligence of the hostile services. This booklet is
primarily oriented at those persons involved in the control and execution of the operations of CI. In like manner, this booklet has a very significant value for other members of the armed forces that function in the areas and services of security and other departments of intelligence.

When Secrets Crash
When a passenger airliner crashes, investigators from the National Transportation Safety Board quickly arrive on the scene to try to determine what went wrong. Press conferences and press coverage follow. The NTSB Web site notes that media are briefed at least once a day by one of the board members accompanying the investigating team and that a public affairs officer maintains contact with the media. Viewers of the nightly news often see aerial images of the crash site. The flight and airplane involved will be precisely identified by the airline and NTSB. Eventually, the public can expect a detailed report on the conclusions.
Things can be very different when the crash involves a military aircraft--particularly if it is an airplane whose existence or mission the United States has not yet acknowledged or that carries particularly sensitive equipment. Over the years, a variety of secret intelligence and military aircraft have crashed, and the specifics of US government responses have varied--sometimes as the result of the different circumstances of the crashes, other times as the result of different rules for dealing with the press queries concerning classified programs. However, preserving secrecy has been a constant objective.

U.S. News: China: How big a threat? (7/23/01)
It was originally created by the U.S. Air Force and is now entrusted with some of the U.S. government's most sensitive and secretive national security studies. So executives at Rand, a think tank based in Santa Monica, Calif., were stunned when intelligence officials called on June 8 to say they were firing Rand from a classified project ordered by Congress to assess China's future military capabilities. The National Intelligence Council (NIC), a group that reports directly to CIA chief George Tenet, concluded that Rand was failing to do its job adequately and decided it needed to hire another contractor.

Fight over Euro-intelligence plans
The sudden closure of one of the world’s largest spy stations is a potential harbinger of confrontation between the U.S. and Germany.

The alt.2600 FAQ file on hacking, including loops
The purpose of this FAQ is to give you a general introduction to the topics covered in alt.2600 and #hack. No document will make you a hacker.

Internet Storm Watch Project
Today Internet Storm Center gathers more than 3,000,000 intrusion detection log entries every day. It is rapidly expanding in a quest to do a better job of finding new storms faster, isolating the sites that are used for attacks, and providing authoritative data on the types of attacks that are being mounted against computers in various industries and regions around the globe. Internet Storm Center is a free service to the Internet community. The work is supported by the SANS Institute from tuition paid by students attending SANS security education programs.

www.hack.co.za
Known exploits.

.:[packet storm]:.
An extremely large and current security tools resource which is for the community, by the community. Packetstorm is a non-profit organization kept alive for the sole purpose of helping secure the World's networks.

GaRe's Free Security Info
This site is dedicated to protecting internet users from Denial of Services (Dos) attacks for windows, explotes, by providing ways of protecting your system. These pages up to date with the most recient attacks, and explotes. If this page is missing a protection you know is avalible, has incorrect information, or missing information on some explote, please let me know.

A rogue's gallery of denial of service attacks
Tuesday, May 22, started out as just another day at CERT Coordination Center at Carnegie Mellon University in Pittsburgh. By day's end, CERT, widely regarded as the Fort Knox of computer security, would be knocked off the net by a distributed denial of service (DDoS) attack. In 2001, even the crème de la crème of network security is vulnerable. If it can happen to CERT, it can happen to you.

Secure Online Behavior: Developing Good Security Habits

The Internet has evolved to be a fundamental business innovation with a clearly demonstrated ability to positively affect organizations as well as individuals. Unfortunately, the Internet was not designed with security in mind - it is inherently insecure. Regardless of how many anti-virus programs, firewalls, and other security programs computer users may use, security continues to be a serious issue. And human error continues to be the weakest link in the security chain.

While human error can never be entirely eliminated, it can certainly be minimized. One of the best things that users can do to protect themselves and their information is to be aware of which behaviors may place them at risk, and to eliminate those behaviors. This article is the first in a series of three that will attempt to introduce readers to good security habits. This installment will offer a brief overview of some of the security threats that prey on bad user habits, and will introduce some fundamental secure habits that should be used for all computer applications. The ensuing articles will offer more in-depth examinations of the threats posed specifically by e-mail and Internet usage, and the habits that users can adopt to minimize the risks posed by these threats.

The Attacks on GRC.COM
Nothing more than the whim of a 13-year old hacker is required to knock any user, site, or server right off the Internet.

I believe you will be as fascinated and concerned as I am by the findings of my post-attack forensic analysis, and the results of my subsequent infiltration into the networks and technologies being used by some of the Internet's most active hackers.

Microsoft Does Not Understand Security
With a bit of horror, I learned that Microsoft's developers have no understanding of security.

Spy Suspect Hanssen to Plead Guilty
Trying to close the books on an espionage debacle that rocked the FBI, the government struck a deal with ex-agent Robert Hanssen that would spare his life in exchange for a full confession detailing secrets he sold the Russians, people familiar with the case said Tuesday.

Spy Agency Reveals Some, Not All
Hidden along Route 32, in a drab beige building that looks every bit the cheap motel it once was, is America's official museum of secrets.

Windows 2000 Security Recommendation Guides
NSA has developed and distributed configuration guidance for Microsoft Windows NT in the form of NT configuration guides. These guides are currently being used throughout the government and by numerous entities as a security baseline for their NT systems.
To assist our Windows 2000 user community, NSA has developed security configuration guidance for Windows 2000, with the cooperation of the other government agencies and industry partners who provided their expertise and extensive technical review. The configuration guides for Microsoft Windows 2000 are being posted on the NSA web site and are presented in three parts: ".inf" files, configuration guides, and supporting documents.

Echelon Spy System
The Croatian NSEI System is Based on the American Spy System ‘Echelon’.

The Nacional Central Electronic Reconnaissance system (NSEI) is the most powerful and most secretive part of Croatia’s intelligence system. In the last ten years, massive financial resources have been invested in this system. As a specially organized unit of the Office for National Security (UNS), this system is responsible for monitoring all connections with countries outside of Croatia’s borders, as well as for monitoring all connections within Croatia which have any association with terrorist acts, intelligence or with directed attempts to destroy the constitutional system.
The monitoring system automatically turns itself on and records any telephone conversations when key words are mentioned, such as explosive, bomb, package, president, minister and others. The American system ‘Echelon’ operates in a similar, albeit much more complex and vast way throughout the world.

In-Q-Tel
In-Q-Tel is dedicated to developing information technology for the CIA that is commercially available, affordable, and supported. In-Q-Tel seeks technology that enables the gathering of accurate, comprehensive and timely foreign intelligence in the interest of national security.

Email snooping almost banned
A cluster of new laws will soon come into effect curbing companies' rights to snoop through workers' emails.
Workers sending personal email across the corporate pipeline will gain a little more protection than they have at present but privacy advocates warn that it won't be a lot.

WWW.huh?: You Are the First Line of Defense
Defense Department computer security systems and specialists foiled nearly 22,500 would-be intruders in 1999 and 24,500 in 2000. There's no let-up in sight.

Sigaba Updates Email Encryption Gateway
Sigaba announced the availability of the its Email Encryption Gateway (SEEG) version 2.0. Enhancements include compatibility with the proposed Advanced Encryption Standard (AES), expanded desktop email encryption support and interoperability with Sigaba Courier. Sigaba Courier is an HTML-based product for use with SEEG version 2.0 that allows users to open Sigaba encrypted email, without the need to download any additional software.

Hampton, New Hampshire Man Convicted and Sentenced for Hacking into Former Employer's Computer Server
McKenna, who was fired by Bricsnet on Friday, October 20, 2000, hacked into his former employer’s computer server on two occasions. The first time was the evening of Friday, October 20, 2000, the day he was fired. The second was the following morning, Saturday, October 21, 2000. McKenna remotely accessed the computer server of his former employer, via the Internet, without authorization and caused damage in four ways: 1) he deleted approximately 675 computer files; 2) he modified computer user access levels; 3) he altered billing records; and, 4) he transmitted E-mails, which purported to have originated from an authorized representative of the victim corporation, to over one hundred (100) clients. Those E-mails contained false statements about business activities of the corporation.

New Encryption and Decryption drafts
The W3C released initial drafts of XML Encryption Syntax and Processing and Decryption Transform for XML Signature.

Study: Interactive TV Could Be 'Spy in Your Home'

A new report from the Center for Digital Democracy (CDD) warns that the privacy concerns of the Internet will be magnified by interactive television (ITV), as technology makers and marketers turn the living room into a laboratory and track everything from income to favorite color.

San Angelo, Texas: Home of Spies
Thanks to neighboring Goodfellow Air Force Base, this isolated West Texas city of 87,000 may harbor more spies, ex-spies and future spies per capita than any place in America, save Washington, D.C.

Statement for the Record for the Joint Economic Committee Cyber Threat Trends and US Network Security
In 2015 we anticipate that the world will almost certainly experience quantum leaps in information technology (IT) and in other areas of science and technology.  IT will be the major building block for international commerce and for empowering nonstate actors.  Most experts agree that the IT revolution represents the most significant global transformation since the Industrial Revolution beginning in the mid-eighteenth century.

Really Secure E-Mail
To be an effective business tool, e-mail must be controlled so that messages are secure and misuse is minimized. Here, we look at two products for doing just that: One uses digital rights management (DRM) and the other, acceptable usage policy (AUP).

 Russian Computer Hacker Indicted in California for Breaking into Computer Systems and Extorting Victim Companies
A federal grand jury today indicted a Russian computer hacker on a host of federal charges for allegedly breaking into computer systems, stealing credit card information and attempting to extort payments from the victim companies for "computer security services."

The Emperor's Codes: The role of Bletchley Park in breaking Japan’s secret ciphers
American hi-jacking of history did not start with the film U-571, as Michael Smith makes clear in this sequel to Station X, his revelations about the pivotal role of GCHQ’s Bletchley Park codebreakers in winning the Hitler war. While Alan Turing and his fellow boffins were applying their mathematical genius exclusively to cracking codes like the U-boats’ ‘Shark’ – in line with the Anglo-American agreement to give the European war theatre precedence – the US Navy’s cryptographers were effectively denying their British opposite numbers vital information on the war in their own Pacific ‘preserve’.

SANSFIRE
Welcome to SANSFIRE, a SANS conference with an emphasis on Forensics, Investigation, Response and Education. SANS has a tradition of offering theme based conferences to meet special needs of the defensive information community. Often, bringing security workers with a common problem together will result in a number of breakthroughs. Perhaps you recall SANS ID’99, the seminal gathering leading to the advanced intrusion detection techniques we employ today. Now, perhaps you are asking, “why do we need a forensics conference”?What do you do when you detect an unknown pattern on the network? When you see outbound packets leaving your system, how do you determine what process is causing the activity? If your disk light starts flashing furiously and you aren’t running anything, how do you check it out? When the boss directs you to toss one of the organization’s computer systems, how do you go about doing it? System, security, and network administrators need tools and techniques to face these challenges.
We will offer case studies that illustrate exactly how various tools and processes solved common problems, mini-tutorials on seizure, evidence collection, system and network forensics, data recovery, and product selection. Preceding the Technical Program we will offer five days of leading edge, in-depth courses taught by the highest rated teachers in the world, including leaders in forensics.

NSA Releases Win2K Security Recommendation Guidelines
The US National Security Agency (NSA) has released a set of guidelines and templates to assist in securing Windows 2000 systems. The materials contain 5 templates to use with Microsoft's Security Configuration Editor, 17 guides to secure various aspects of the OS, and 3 supporting documents with indepth defense coverage and particulars about various popular software packages.


The templates include configuration settings for domain controllers (DCs), domain policy, and server and workstation settings. The guides are available in Adobe Portable Document Format (PDF) and cover a broad range of topics, including network architecture, Group Policy, file and disk resources, Encrypting File System (EFS), DNS, Active Directory (AD), Microsoft IIS, Kerberos, public key infrastructure (PKI), Windows NT and 9x clients, Outlook, and routers.

Information Operations
The AOC is on the front lines of an undeclared information war. The defense of Army networks across the world is imperative. It is obvious that no “out-of-the-box” security tool will suffice to protect the integrity of the Army’s digital domain. Consequently, Army network managers need to do a lot more in terms of Enclave Site Defense. For guidance, they can turn to the Army’s standard doctrine. A shown in this paper, defending a network enclave is not much different than defending a hilltop in the jungle. The same principles of war apply. As seen in FM 100-5, the Army does not rely on weapon systems alone to guarantee success on the battlefield. Instead, commanders deploy weapons systems in conjunction with some time-honored tactics that favor offensive over defensive operations. The same should be true for Enclave Site Defense. Defending a site is more than just deploying the weapon systems. It is also about detecting the attack and reacting to it. This paper will discuss these very issues.

Computerworld Resource Center: Security
Computer World's Security site with a lot of articles. Good reading!

Hacking Into Wall Street
On March 10, 2000, the Nasdaq reached an all-time high, breaking the 5000 mark for the very first time. Internet Trading Technologies (ITTI) wasn't participating in the market upswing, however. The company was too busy working to fend off an online attack.

Hacking threat rises with layoffs
When someone cracked Slip.net's computer system, altered customer accounts and deleted important databases, the Internet service provider didn't need to look far to find the attacker.

It wasn't a criminal outfit seeking credit card numbers, and it wasn't a scrawny whiz kid hacking away for a challenge in his dark bedroom.

It was Nicholas Middleton, a former computer administrator for Slip.net, who had been unhappy at the San Francisco company and recently quit. Middleton fought the resulting criminal charges on a legal technicality but lost and got three years' probation.

U.S. Considered Sharing Security Secrets With China, Syria, Pakistan
Newly declassified documents show that America considered sharing secret computer security code "keys" with foreign powers including China, Syria and Pakistan.

The documents include a secret 1993 CIA cable on the "Clipper" project, a computer security chip developed by the U.S. government. The Clipper chip contained advanced "key recovery" surveillance technology, allowing the government to secretly tap phone conversations and monitor computer communications.

HoneyNet Project
The Honeynet Project is a group of thirty security professionals dedicated to learning the tools, tactics, and motives of the blackhat community and sharing those lessons learned. The team collects this information on their own time with their own resources. The primary method for obtaining information is through the use of a Honeynet. It is our hope and intent to develop the security community in the two following ways.

Raise awareness.
To raise awareness of the threats and vulnerabilities that exist in the Internet today. We raise awareness by demonstrating real systems that were compromised in the wild by the blackhat community. Many people believe it can't happen to them. We hope to change their mind.

Teach and inform.
For those in the community who are already aware and concerned, we hope to give you the information to better secure and defend your resources.

Pentagon plans to X-out data on old computers
The Pentagon believes it has found a way to give its old computers away to American schools and still protect information locked in the machines' hard drives.

Hackers attempted to breach California power grid
As Californians suffered under rolling blackouts last month, computer hackers were trying to breach the computer system at the California Independent System Operator (Cal-ISO), which oversees most of state's power transmission grid.

Foreign spies serious threat to U.S.
A 30-year veteran of the intelligence field says most Americans "almost ignore ... the power of intelligence and counterintelligence" in this country, despite the danger foreign intelligence agents pose to the nation's security.

Secure E-Mail Alternatives
E-mail messages sent over the Internet are not private. Messages are sent in readable form, replicated at various points, and then copied whenever backups are made. Clearly, such messages can represent security risks and potential legal liabilities. For those of us who like privacy, finding ways to make e-mail more secure makes sense.

The hi-tech spy
The American spy plane forced to land in China was chock-full of electronic surveillance equipment. Today, espionage is all about who has the best technology.

Adware, Spyware and Advertising Trojans - Info & Removal Procedures
Adware, Spyware and other unwanted "malware" - and how to remove them.

Osama Bin Laden
This is the Central Intelligence Agency's unclassified fact sheet on Osama bin Laden, the cave-dwelling lunatic suspected of ordering the August bombings of U.S. embassies in Kenya and Tanzania.

Disguise manual
Take a look at this excerpt from a once-secret 1944 manual prepared by the Office of Strategic Services, the predecessor to the CIA. In this chapter, spooks are schooled on quick changes, how to alter your body type, and the use of props. And don't miss the hilarious tips designed especially for the ladies.

Lesson 16: Assassinations using poison and cold steel
Here are two excerpts from a 180-page how-to manual that investigators believe has been used by followers of Saudi terrorist Osama bin Laden. The document, "Military Studies in the Jihad Against the Tyrants," was seized last year at the Manchester, England home of a bin Laden disciple. Federal prosecutors in New York recently introduced the 18-chapter manual, written in Arabic, at the trial of four men accused of involvement in the 1998 bombing of U.S. embassies in Kenya and Tanzania (an English translation was also placed in evidence). The terrorism manual offers jihad members detailed pointers on everything from forged documents to kidnapping techniques. TSG may soon post the whole incredible document, but

Alternative protection against malicious code
While viruses and online threats have gotten more sophisticated, so have the methods for protecting your PC. Get an inside look at what's available beyond antivirus software.
In this article, I'll discuss the advantages of heuristic software over the pattern-matching approach traditionally employed by antivirus companies, and speculate on what the future may hold for malicious code protection.

Spy Vs. Spy
Many who have done business in developing countries where wealth is disproportionate, hostage-taking is common and Americans are always a target, know the value of a couple of bodyguards and an armored escort when driving, no matter how much the service costs.

The main reason why companies budget for physical protection in some locales is a certainty on their part that if they don't defend themselves, the local law won't defend them either.

The same is true on the Internet, where business conditions are probably comparable to working conditions in Uzbekistan or North Korea - the 149th and 155th least-free economies on the planet, according to the 2000 Index of Economic Freedom. But in the last year, a handful of private companies have started to take enforcement into their own hands, quietly developing security units to protect their clients' assets in cyberspace.

Web hosters such as Exodus Communications, Metromedia Fiber Network and ServerVault have been hiring retired agents from the Federal Bureau of Investigation, National Security Agency, Secret Service, Royal Canadian Mounted Police, Scotland Yard, U.S. Army and U.S. Navy, and whisking others away from their govern

For NSA vet, security's still a hard sell
Bill Crowell has spent his career in security, going from top civilian at the National Security Agency to president and chief executive officer of Cylink Corp., a developer of public-key security systems. But at times, he just can't help being a hacker.

"I used to work where we had a facial recognition system in a briefing center," Crowell recalls. "We didn't have the images bound to the individual with a public key, so I slipped my picture into the file of the guy who did a demo of the system. He . . . couldn't figure out how I kept getting in the door saying I was him."

Death by a thousand flats
There is a building on the south bank of the Thames at Vauxhall Cross, just upstream of the MI6 headquarters, that looks like a new palace for Nicolae Ceausescu. This conspicuously ugly apartment block, better suited to downtown Bucharest than central London, is, however, the product of unbridled western capitalism. "Unbridled" because when you first set eyes on a such a big, garish structure on such an important site, you can't help wondering if anyone in authority stopped to check the reins of this galloping development. Yet the developers - St George plc - faced numerous committees and constraints. They had to come up with a scheme that would meet with the approval of Lambeth council's planners and politicians.

PGPfone
PGPfone (Pretty Good Privacy Phone) is a software package that turns your desktop or notebook computer into a secure telephone. It uses speech compression and strong cryptography protocols to give you the ability to have a real-time secure telephone conversation via a modem-to-modem connection. It also works across the Internet!

Phone offers military-level security
It used to be that top-secret communication gadgets were reserved for the military and security services.
Now, a German company is selling a cellular phone that offers consumers military-grade privacy.

Saddam RAF secrets fear
One of the RAF's deadliest weapons has been found intact and on public display at Belgrade's Military Museum, raising fears that its secret technology has been compromised.

The Air Launched Anti-Radiation Missile, or Alarm, is one of Nato's best weapons against radar-guided anti-aircraft missile sites. One apparently misfired during the 1999 air operation against Serbia, fluttered down to a marshy area out-side the western Serb village of Nikinci and did not self-destruct.

Retired Col.'s Espionage Case Begins
A retired Army reserve colonel was such a valuable spy that when a former Soviet leader was handed a list of his nation's top sources, George Trofimoff was at the top, prosecutors said Tuesday.

SORM - Russian Internet Wiretapping Project
Russian FSB (Federal Security Service, successor to KGB) is preparing regulations and technical requirements to facilitate field operative work in computer networks. SORM (in Russian - System for Conduct of Investigations and Field Operations) is a set of regulations and technological equipment facilitating access of FSB to all computer communications and internal documents of telecom providers (including phone and internet companies). The technology provides an effective mechanism to by-pass a Constitutionally required process of court authorization for wire-tapping of electronic communications.

FSB
Official FSB website in Russian. Click here for the Babelfish translation in English.

Echelon Watch Answers to Frequently Asked Questions (FAQ) about Echelon.

s e c u r i t y w a t c h . c o m
SecurityWatch.com is not just a security portal site, it is the most comprehensive and complete of its kind on the web. SecurityWatch.com provides the latest information on business, technology issues, bugs and product updates. In addition, SecurityWatch.com offers premium services, ranging from access to an extensive Knowledge Base to real world automated electronic vulnerability assessment tools such as recurrent portscans or full audits.

Duncan Campbell
Website of Duncan Campbell, Investigative journalist & TV producer with topics like: 1999 STOA Report on communications intelligence, The original 1988 ECHELON report, British American Tobacco and tobacco smuggling (evidence to the House of Commons, February 2000), British "D Notice" committee close down secret agent web sites, screw the internet ... etc.

Interception Capabilities 2000
Report to the Director General for Research of the European Parliament (Scientific and Technical Options Assessment programme office) on the development of surveillance technology and risk of abuse of economic information. This study considers the state of the art in Communications intelligence (Comint) of automated processing for intelligence purposes of intercepted broadband multi-language leased or common carrier systems, and its applicability to Comint targeting and selection, including speech recognition.

8th ACM Conference on Computer and Communications Security
The ACM Conference on Computer and Communications Security (CCS) is a forum for the presentation of new research results and the identification of future research directions in the area of computer and communications security.

10th USENIX Security Symposium
The field of computer security has a fascinating property: nobody will ever claim that it's a solved problem. Just when we think we have a handle on it, something new and exciting comes along to change the rules and break all the invariants that previously secure systems were depending upon. This symposium addresses cutting-edge concerns ranging from making ordinary programs more robust against attack through protecting whole networks against denial-of-service attacks. Want to verify that your firewall is doing what you think it should be doing? Is your Web site doing client authentication in an insecure fashion? Curious about privacy issues or dealing with law enforcement? Come to the 2001 USENIX Security Symposium and find out about these topics and many more.

CERT® Coordination Center Training and Education
The CERT/CC offers learning opportunities in network computing security through an educational collaboration with Carnegie Mellon University and through our own training courses aimed at private and public sector professionals.

With the Software Engineering Institute (SEI), we offer courses for managers of computer security incident response teams (CSIRTs) and technical experts seeking training in responding to and analyzing computer security incidents, as well as courses for managers and technical personnel who would like to learn practical techniques for improving network security. All courses are held in Pittsburgh, PA, unless otherwise noted.

The Internet Security Conference
TISC is all about education. TISC is all about the latest products and technology. TISC is all about networking with peers and colleagues. But most of all. TISC is all about SECURITY!

Echelon 'Hampers Virus Detection'
Anti-virus companies have attacked the European Parliament's report on the Echelon spy network which recommends greater use of encryption, warning that encrypted data can hamper virus defence measures.

International Common Criteria Project Homepage
The Common Criteria represents the outcome of a series of efforts to develop criteria for evaluation of IT security that are broadly useful within the international community.

Statewatch: monitoring civil liberties in the UK and EU
Statewatch News online carries news and reports on civil liberties and EU access to documents with links to background information.

Aegean Park Press
Since 1973, Aegean Park Press has been publishing books that primarily concern the subject of codes and ciphers. Today the Cryptographic Series of Aegean Park Press includes over 80 titles, with new titles being added on a regular basis.
Aegean Park Press also publishes books on a variety of other subjects, including books concerning Mayan Studies, Contract Bridge, Genealogy, and Mathematics.

The founder of the company, Wayne G. Barker, spent 23 years as an intelligence officer. He retired from the U.S. Army in the grade of Lt. Colonel.

Robert Philip Hanssen - Alleged KGB "Mole" Within the FBI
Robert Philip Hanssen, subject of this book, was a career Special Agent of the Federal Bureau of Investigation specializing in counterintelligence. For many years the FBI never suspected that Hanssen in reality was a spy for the KGB, the intelligence arm of the Soviet Union, and later the SVR, the KGB's successor.

This story of Robert Philip Hanssen proves that truth is often stranger than fiction. With added photographs the book makes intriguing and fascinating reading and belongs in the library of all who are interested in intelligence and espionage.

Latest Council of Europe Draft Convention on Cybercrime and Explanatory Memorandum of the Convention
On April 27, 2000, the Council of Europe released its draft Convention on Cyber-Crime, which is the first multilateral instrument drafted to address the problems posed by the spread of criminal activity on computer networks. The United States has participated in the drafting of the Council of Europe Convention, which is still a work in progress, since the project began over two years ago. The drafting group is scheduled to complete its work by December 31, 2000, but it continually releases new drafts. The Convention will then be finalized by the Steering Committee on European Crime Problems and submitted to the Committee of Ministers for adoption before it is opened to members of the Council of Europe and observer nations, including the United States, for signature.

Telco
Good introduction on how telco's operate.

Worldwide spying network is revealed
At last, the leaked draft of a report to be published next week by the European parliament removes any lingering doubt: Echelon, a shadowy, US-led worldwide electronic spying network, is a reality.

ZDNet - Surveillance
ZDNet's collection of their own articles on the subject Surveillance.

European Parliament urges open source protection against Echelon
A major investigation into the communications spy network says European business and individuals should encrypt all emails - and open source software could hold the key.

How to spot Echelon listening stations
The European Parliament's report into the network that snoops on civilian communications gives some useful clues on how to spot Echelon bases.

Blogspot back online!
Due to connection problems, this weblog is finally back online!

Worm tries to attract surveillance attention
U.K.-based security software vendor Sophos has warned of a new variant on the "Love Bug" worm which, as well as infecting users' machines, seems designed to attract the attention of the "Echelon" surveillance system. Sophos added that it has found just one example of the worm in the wild.

Aries II Revisited:The Deluge of Government Lies Continues

Conspiracy Theory"
In the continuing effort to make China the bogeyman of the 21st century, Washington has scored yet another coup - the loss of the EP-3E Aries II surveillance aircraft. It's very reminiscent of the phony FBI Hanssen Spy Case. In other words, what the US Government is saying just doesn't jibe with the facts.

US NAVY CHARGED WITH CONTINUING COVER-UP.
In 1997, a US Navy intelligence officer was riding in a Canadian Navy helicopter trying to surveil a Russian ship near Seattle that was believed to be collecting intelligence. Both the Canadian pilot and the American officer suffered eye damage caused, they say, by a laser fired from the ship.
This article charges the Navy (ONI) with covering up Russian guilt in the matter and even altering an official photo to help in the cover up -- in order to avoid upsetting US-Russian relations. The matter was more of less hushed up until the US officer, LtCdr Jack Daly, went public 2 or 3 years ago. Since then, he has had career problems and would have been passed over for promotion and forced out of the Navy had not Congress intervened.

NSA Adviser Says Cyber-Assaults On Pentagon Persist With Few Clues
A series of sophisticated attempts to break into Pentagon computers has continued for more than three years, and an extensive investigation has produced "disturbingly few clues" about who is responsible, according to a member of the National Security Agency's advisory board.

The spy left out in the cold
The Russian defector Victor Makarov believes he has been let down by Britain. Now he plans to sue to get his life back

Improving the Security of Your Site by Breaking Into it
In this paper we will take an unusual approach to system security.
Instead of merely saying that something is a problem, we will look
through the eyes of a potential intruder, and show _why_ it is one. We
will illustrate that even seemingly harmless network services can become
valuable tools in the search for weak points of a system, even when
these services are operating exactly as they are intended to.

GnuPG (The GNU Privacy Guard)
GnuPG is a complete and free replacement for PGP. Because it does not use the patented IDEA algorithm, it can be used without any restrictions. GnuPG is a RFC2440 (OpenPGP) compliant application.

Spammimic
There is tons of spam flying around the Internet. Most people can't delete it fast enough. It's virtually invisible. This site gives you access to a program that will encrypt a short message into spam. Basically, the sentences it outputs vary depending on the message you are encoding. Real spam is so stupidly written it's sometimes hard to tell the machine written spam from the genuine article.

Tripwire
Tripwire is a tool that checks to see what has changed on your system. The program monitors key attributes of files that should not change, including binary signature, size, expected change of size, etc. The hard part is doing it the right way, balancing security, maintanence, and functionality.

ShareSniffer, Inc.
Welcome to ShareSniffer.com, home of the wildly popular software program ShareSniffer. Right now—this instant—there are tens of thousands of computers worldwide that are sharing files deliberately with the Internet—requiring no password and no special software other than the Microsoft Windows™ operating system. In testing ShareSniffer, we have discovered files of all types available for copying, viewing or even execution.

SilentRunner
SilentRunner is a passive, multi-functional software tool that monitors network activity in real time, producing a virtual picture of network usage and vulnerabilities.

Cybercrime
Computer Crime and Intellectual Property Section (CCIPS) of the Criminal Division of the U.S. Department of Justice.

Newsletter
Commercial firm has it's own newsletter on Spy matters.

International Forum on Surveillance by Design
A one day public meeting on the development of global surveillance strategies for law enforcement and national security.

Intelligence Programs and Systems - Alphabetical Listing
This resource is a comprehensive alphabetical listing of intelligence programs, including both those for which detailed descriptions are available, as well as those for which profiles are not yet available. It is an extremely mixed bag that includes major hardware programs for which extensive profiles are available, medium-sized software implementations which are briefly described, as well as a whole bunch of other cats and dogs which are not and may never be profiled, but whose existence is known and which are included for the sake of completeness and potential future inclusion. In 1993, the Secretary of Defense directed all functional areas to select standard information systems and applications, and eliminate legacy systems. To date, the Department has identified 1,849 information systems, of which functional communities have selected 247 as migration systems. DoD will eliminate at least 1,079 of these legacy systems by the year 2000.

Inside the NSA
It was simpler during the Cold War when the National Security Agency had one major target -- the Soviet Union. Now there are many new targets and problems.

MIL-HDBK-1195 Radio Frequency Shielded Enclosures
Electromagnetic Interference (EMI) is a description of the phenomenon which results from allowing conducted and radiated electrical signals to reach destinations where their presence is undesirable. Uncontrolled EMI may cause computer malfunction or error, detonation of electrically explosive devices, or be the cause for loss of classified information to an enemy. The objective of this handbook is to provide a basic understanding of the problems associated with the acquisition of a facility containing one or more EMI shielded enclosures. It is intended that only the characteristics of the facility that are unusual in comparison to a nonshielded facility will be addressed. This handbook is a brief introduction to EMI shielding theory, and presents basic criteria of importance during the planning, design, and construction of a typical facility containing an EMI shielded enclosure.

Computer Forensics
The Autopsy Forensic Browser is an HTML based front-end interface to TCT (The Coroners Toolkit ) and TCTUTILs. It allows an investigator to browse forensic images (an image generated from using dd(1)) from a file, inode, or block level abstraction. It also provides a convenient interface for searching for key words on an image.

The President John F. Kennedy Assassination Records Collection
In 1992, the National Archives and Records Administration established the John F. Kennedy Assassination Records Collection pursuant to Public Law 102-526. The Collection contains more than 4 1/2 million pages of assassination-related records, photographs, motion pictures, sound recordings and artifacts.

The Centre for Counterintelligence and Security Studies
The Centre for Counterintelligence and Security Studies (CI Centre) provides advanced and innovative CI and security training, research and analysis for people in the intelligence, national security and defense communities in the US Government as well as for the corporate sector. Espionage, spies and spying activities are in the news everyday. Get a professional, in-depth understanding of the issues and enhance your CI and security awareness by attending our executive-level courses taught by experts retired from the FBI, CIA, Army and KGB.

Secure FTP
Data confidentiality. Data integrity. User Authentication. Take away any of these elements and your data is at risk as it travels the Internet. In the past, FTP (File Transport Protocol) was the optimal file transfer utility, but with the real threat of data pirating, you want a mechanism that securely transfers data within your enterprise and between your business partners. Sterling Commerce's CONNECT:Enterprise for UNIX with Secure FTP is an effective, safe, and secure solution for your E-commerce needs.

Information Operations URLography by the TNO Physics and Electronics Laboratory (TNO FEL)
Information Warfare (IW) links

Pentagon General Counsel Review of Allegations Regarding Dr. John Deutch
In February 2000, the CIA IG provided to the Department a copy of 26 journals (approximately 675 pages of text) that Dr Deutch had maintained during his tenure at DoD. The CIA had located these journals on three Personal Computer Memory Card International Association (PCMCIA) cards which Dr. Deutch had used to store and transfer data from the various computers at his disposal. These journals include Dr. Deutch's detailed descriptions of his daily activities; they focus on his official activities, although they also include many entries of a personal nature. Although the PCMCIA cards may have been authorized for the storage of classified information, the journal entries were entered and worked on from Dr. Deutch's home computers, which were not so authorized.