Secrecy of Cyber Threats Said to Cause Complacency
The American public does not have an accurate sense of the threat posed by attacks in cyberspace because most of the relevant threat information is classified, according to Sen. Sheldon Whitehouse (D-RI), who introduced legislation last week to raise public awareness of cyber security hazards.
“The damage caused by malicious activity in cyberspace is enormous and unrelenting,” Sen. Whitehouse said on April 14. “Every year, cyber attacks inflict vast damage on our Nation’s consumers, businesses, and government agencies. This constant cyber assault has resulted in the theft of millions of Americans’ identities; exfiltration of billions of dollars of intellectual property; loss of countless American jobs; vulnerability of critical infrastructure to sabotage; and intrusions into sensitive government networks.”
“These massive attacks have not received the attention they deserve. Instead, we as a nation remain woefully unaware of the risks that cyber attacks pose to our economy, our national security, and our privacy,” he said.
“This problem is caused in large part by the fact that cyber threat information ordinarily is classified when it is gathered by the government or held as proprietary when collected by a company that has been attacked. As a result, Americans do not have an appropriate sense of the threats that they face as individual Internet users, the damage inflicted on our businesses and the jobs they create, or the scale of the attacks undertaken by foreign agents against American interests.”
With Sen. Jon Kyl (R-AZ), Sen. Whitehouse introduced the “Cyber Security Public Awareness Act” to require government agencies to provide increased public reporting of cyber threat information.
“As of 2011, the level of public awareness of cyber security threats is unacceptably low. Only a tiny portion of relevant cyber security information is released to the public. Information about attacks on Federal Government systems is usually classified. Information about attacks on private systems is ordinarily kept confidential. Sufficient mechanisms do not exist to provide meaningful threat reports to the public in unclassified and anonymized form,” the bill stated.
Last year, Sen. Whitehouse chaired a bipartisan Senate Intelligence Committee task force on cyber security.
“The government keeps the damage we are sustaining from cyber attacks secret because it is classified,” he said last November. The private sector keeps the damage they are sustaining from cyber attacks secret so as not to look bad to customers, to regulators, and to investors. The net result of that is that the American public gets left in the dark.”
Denice Ross, former U.S. Chief Data Scientist and Data Policy Institute lead at the Federation of American Scientists, will be honored for her stewardship of public data by the National Academy of Public Administration, where she has been named a Fellow.
Confirmation that the construction of the security perimeter and associated security infrastructure at RAF Lakenheath are still ongoing once again raises questions about whether U.S. nuclear weapons have already been deployed to the base.
Alaskans are sensibly pulling back from the vogue for bans and returning to a western tradition that has worked for more than half a century – one that welcomes innovation but also oversees it closely.
The strength of our nation’s data policy isn’t just in the rules we write, but in how effectively we translate those rules into a system that prioritizes the public good. Join us in this movement to design and build more resilient national data policies.