FAS

Post-WikiLeaks Network Monitoring Takes Shape

02.21.12 | 2 min read | Text by Steven Aftergood

The heightened surveillance of classified government information networks that was a predictable response to the unauthorized disclosures published by WikiLeaks is becoming more clearly discernible.

“USSTRATCOM/USCYBERCOM is monitoring use of the SIPRNet and now has a mechanism for reporting certain anomalous behaviors for appropriate remediation,” said Thomas A. Ferguson, Deputy Under Secretary of Defense (Intelligence) and Teresa Takai, DoD Chief Information Officer.

“We have established the first formal security oversight and assessment program to determine levels of compliance” with rules of access to classified networks,” they said in response to questions for the record from a March 10, 2011 hearing of the Senate Homeland Security and Governmental Affairs Committee on “Information Sharing in the Era of WikiLeaks.”

“Simply understanding that we have this monitoring capability creates deterrence of willful mischief,” they added.

“We will improve our ability to individually track users through enforcement of strong user authentication on classified networks, ensure responsible controls on removable media, and provide strong website authentication for classified fabrics — all to provide greater control over access to classified information,” wrote Corin R. Stone of the Office of the Director of National Intelligence in her own answers to questions for the record from the same hearing.

“The FBI and CIA have robust insider threat programs in place for tracking the specific information accessed by users of their systems and detecting, to varying degrees, suspicious user behavior (e.g., excessive file accesses or data downloads) and alerting security personnel to take action.  Several agencies (e.g., NGA, NSA, NRO) are maturing their audit and insider threat capabilities, while others still lag behind,” Ms. Stone wrote.

“The WikiLeaks disclosures highlighted the need to ‘raise the bar’ in terms of these capabilities,” she wrote.

In testimony before the Senate Armed Services Committee last week, Defense Intelligence Agency director Lt. Gen. Ronald L. Burgess said that “The potential for trusted US Government and contractor insiders using their authorized access to personnel, facilities, information, equipment, networks or information systems in order to cause great harm is becoming an increasingly serious threat to national security.”

publications
See all publications
Emerging Technology
day one project
Policy Memo
Ready for the Next Threat: Creating a Commercial Public Health Emergency Payment System

In anticipation of future known and unknown health security threats, including new pandemics, biothreats, and climate-related health emergencies, our answers need to be much faster, cheaper, and less disruptive to other operations.

12.23.24 | 5 min read
read more
Emerging Technology
day one project
Policy Memo
From Strategy to Impact: Establishing an AI Corps to Accelerate HHS Transformation

To unlock the full potential of artificial intelligence within the Department of Health and Human Services, an AI Corps should be established, embedding specialized AI experts within each of the department’s 10 agencies.

12.23.24 | 10 min read
read more
Government Capacity
day one project
Policy Memo
Transforming the Carceral Experience: Leveraging Technology for Rehabilitation

Investing in interventions behind the walls is not just a matter of improving conditions for incarcerated individuals—it is a public safety and economic imperative. By reducing recidivism through education and family contact, we can improve reentry outcomes and save billions in taxpayer dollars.

12.20.24 | 7 min read
read more
Emerging Technology
day one project
Policy Memo
Creating a National Exposome Project

The U.S. government should establish a public-private National Exposome Project (NEP) to generate benchmark human exposure levels for the ~80,000 chemicals to which Americans are regularly exposed.

12.20.24 | 7 min read
read more