Advanced search    Help

Clear all search criteria

Only 2/3! You are seeing results from the Public Collection, not the complete Full Collection. Sign in to search everything (see eligibility).

• Office of the U.S. Intellectual Property Enforcement Coordinator: Hearing Before the Subcommittee on Intellectual Property, Competition, and the Internet of the Committee on the Judiciary, House of Representatives, One Hundred Twelfth Congress, First Session, March 1, 2011

  Show summary     Open resource [pdf]     (open full abstract)

  From the opening statement of Bob Goodlatte: "Companies that rely upon strong intellectual property [IP] protection employ 18 million Americans, account for more than 50 percent of our exports, contribute 40 percent of our economic growth, and 6 percent of our gross domestic product. Given these numbers, it is apparent that our continued ability to promote creativity and innovation and protect American intellectual property lie at the center of vital U.S. economic and national security interests. But how serious are the challenges to U.S. IP leadership? What should be our priorities, and what are the appropriate roles of the public and private sectors in preserving our competitive advantages and protecting intellectual property? […] Industry has estimated the loss of intellectual property worldwide to cyber crime in 2008 alone cost businesses approximately $1 trillion. We believe this trend has gotten worse. Last year, some of our largest information technology companies discovered that through-out much of 2009, they had been the targets of systematic efforts to penetrate their networks and acquire proprietary data. […] It is clear that the challenges faced by IP holders are serious and that protecting intellectual property has important implications for our Nation's economy innovation and national security. The U.S. Government clearly has both strategic and practical interests in ensuring our Nation's IP laws foster the continued development of innovative and creative products here at home. We also have obligations to ensure our laws are administered efficiently and enforced appropriately." Statements, letters, and materials submitted for the record include those of the following: Bob Goodlatte, Melvin L. Watt, John Conyers, Howard Coble, Victoria A. Espinel, Howard L. Berman, Debbie Wasserman Schultz, and Tom Reed.

  United States. Government Printing Office

  2011
• Cyberweapons: Leveling the International Playing Field

  Show summary     Open resource [pdf]     (open full abstract)

  "One of the largest security concerns facing the United States today is how to mitigate its vulnerability to cyberweapons. Over the past twenty years, cyberthreats have evolved from solitary hackers motivated by monetary gain and prestige to organized crime and state actors. The sophistication and capabilities of these threats grows in direct proportion to the level of connectivity in society. Despite this steady development of cyberthreats, relatively little attention is given to discerning how these threats will impact warfighting and the international system. Most of the current literature on cyberwarfare considers it, at best, a force multiplier. Many scholars disregard its effects as a standalone attack vector, citing various reasons from US responses to Pearl Harbor and 9/11 to the inability of strategic bombing in World War II to subdue the civilian populations in England and Germany, absent combined military operations. These perspectives are correct in arguing that offensive cyberoperations without traditional, conventional power will be largely futile. This analytical approach, however, presumes that cyberweapons will be used in an offensive, first-strike manner. The long-range strike capabilities of cyberwar have the potential to be extremely effective when employed as an anticoercion weapon. In essence, a strong cyber capability is a deterrent force that will largely mitigate outside interference in domestic and regional affairs."

  Army War College (U.S.)

  Rustici, Ross

  2011
• Test Results for Mobile Device Acquisition Tool: Mobilyze 1.1

  Show summary     Open resource [pdf]     (open full abstract)

  This document reports the results from testing of the Mobilyze 1.1. "The Computer Forensics Tool Testing (CFTT) program is a joint project of the National Institute of Justice (NIJ), the research and development organization of the U.S. Department of Justice (DOJ), and the National Institute of Standards and Technology's (NIST's) Office of Law Enforcement Standards (OLES) and Information Technology Laboratory. CFTT is supported by other organizations, including the Federal Bureau of Investigation, the U.S. Department of Defense Cyber Crime Center, U.S. Internal Revenue Service Criminal Investigation Division Electronic Crimes Program, and the U.S. Department of Homeland Security's Bureau of Immigration and Customs Enforcement, U.S. Customs and Border Protection and U.S. Secret Service. [...] This report is divided into five sections. The first section is a summary of the results from the test runs. This section is sufficient for most readers to assess the suitability of the tool for the intended use. The remaining sections of the report describe how the tests were conducted and provide documentation of test case run details that support the report summary. Sections 2 and 3 provide a justification for the selection of test cases and assertions from the set of possible cases that are defined in the test plan for smart phone forensic tools. The test cases are selected, in general, based on features offered by the tool. Section 4 lists the hardware and software used to run the test cases. Section 5 contains a description of each test case, test assertions used in the test case, the expected result and the actual result."

  National Institute of Justice (U.S.)

  2011-01
• Test Results for Mobile Device Acquisition Tool: iXAM Version 1.5.6

  Show summary     Open resource [pdf]     (open full abstract)

  This document reports the results from testing iXAM Version 1.5.6. "The Computer Forensics Tool Testing (CFTT) program is a joint project of the National Institute of Justice (NIJ), the department of Homeland Security (DHS), and the National Institute of Standards and Technology Office of Law Enforcement Standards (OLES) and Information Technology Laboratory (ITL). CFTT is supported by other organizations, including the Federal Bureau of Investigation, the U.S. Department of Defense Cyber Crime Center, U.S. Internal Revenue Service Criminal Investigation Division Electronic Crimes Program, and the U.S. Department of Homeland Security's Bureau of Immigration and Customs Enforcement, U.S. Customs and Border Protection and U.S. Secret Service. The objective of the CFTT program is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. [...] This report is divided into five sections. The first section is a summary of the results from the test runs. This section is sufficient for most readers to assess the suitability of the tool for the intended use. The remaining sections of the report describe how the tests were conducted and provide documentation of test case run details that support the report summary. Sections 2 and 3 provide justification for the selection of test cases and assertions from the set of possible cases defined in the test plan for smart phone forensic tools. The test cases are selected, in general, based on features offered by the tool. Section 4 lists the hardware and software used to run the test cases. Section 5 contains a description of each test case, test assertions used in the test case, the expected result and the actual result."

  National Institute of Justice (U.S.)

  2010-12
• Test Results for Mobile Device Acquisition Tool: Zdziarski's Method

  Show summary     Open resource [pdf]     (open full abstract)

  "This document reports the results from testing Zdziarski's Method against the 'Smart Phone Tool Test Assertions and Test Plan.' [...] The Computer Forensics Tool Testing (CFTT) program is a joint project of the National Institute of Justice (NIJ), the department of Homeland Security (DHS), and the National Institute of Standards and Technology Office of Law Enforcement Standards (OLES) and Information Technology Laboratory (ITL). CFTT is supported by other organizations, including the Federal Bureau of Investigation, the U.S. Department of Defense Cyber Crime Center, U.S. Internal Revenue Service Criminal Investigation Division Electronic Crimes Program, and the U.S. Department of Homeland Security's Bureau of Immigration and Customs Enforcement, U.S. Customs and Border Protection and U.S. Secret Service. The objective of the CFTT program is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. [...] This report is divided into five sections. The first section is a summary of the results from the test runs. This section is sufficient for most readers to assess the suitability of the tool for the intended use. The remaining sections of the report describe how the tests were conducted and provide documentation of test case run details that support the report summary. Sections 2 and 3 provide justification for the selection of test cases and assertions from the set of possible cases defined in the test plan for smart phone forensic tools. The test cases are selected, in general, based on features offered by the tool. Section 4 lists the hardware and software used to run the test cases. Section 5 contains a description of each test case, test assertions used in the test case, the expected result and the actual result."

  National Institute of Justice (U.S.)

  2010-12
• EU-U.S. Summit Joint Statement [November 20, 2010]

  Show summary     Open resource [pdf]     (open full abstract)

  This November 20, 2010 joint statement re-affirms the close partnership between the European Union (EU) and the United States. Topics include the North Atlantic Treaty Organization's Strategic Concept, the EU-U.S. Working Group on Cyber-security and Cyber-crime, the Terrorist Finance Tracking Programme, the Visa Waiver Programme, and negotiations on a Passenger Name Record agreement.

  United States. Office of the White House Press Secretary

  2010-11-20
• Framework for Establishing Critical Infrastructure Resilience Goals: Final Report and Recommendations by the Council

  Show summary     Open resource [pdf]     (open full abstract)

  "Our nation faces an increasingly complex set of risks that are interwoven into all facets of our businesses, infrastructures, and communities. The threat of hurricanes, financial instability, pandemics, cyber crime, social unrest, terrorism, and other disruptive events that flow from our participation in a global economy has become a part of our everyday lives. While we continue to work toward a safer and more secure world, the reality is that we must address emerging risks with diligence, commitment, and the understanding that we cannot reroute hurricanes, intercept every cyber attack, or prevent every disruption. President Obama put it succinctly: 'To succeed, we must face the world as it is.' Critical infrastructure risks pose a special problem for the country. The companies that own these infrastructures operate in competitive and regulated environments and must balance risk, investment, and cost to customers. Although they have a deeply ingrained sense of responsibility to their customers and shareholders, it is neither practical nor possible to safeguard infrastructures from all hazards. For the government, the continuity of these infrastructures--and electric power in particular--is critical to many of its fundamental missions: economic stability and growth, national security, public safety, and quality of life. Resilience provides the bridge between the possible and the ideal. The National Infrastructure Advisory Council (NIAC or Council) considers resilience to be a fundamental strategy that makes our businesses stronger, our communities better prepared, and our nation more secure. It is often the most flexible and cost-effective strategy to ensure continuity of services and functions and to minimize the impact of disruptions."

  National Infrastructure Advisory Council (U.S.)

  2010-10-19
• Statement by NSC Spokesman Mike Hammer on National Security Advisor General Jim Jones' Travel to Germany and Russia October 2-6 [October 1, 2010]

  Show summary     Open resource [pdf]     (open full abstract)

  In this October 1, 2010 statement, National Security Council Spokesman Mike Hammer announces National Security Advisor Jim Jones' travels to Germany and Russia. In Russia, Jones will address a security conference, "which will cover 21st Century security challenges facing all states, including natural and industrial disasters, transnational crime and converging threats, and cyber security."

  United States. Office of the White House Press Secretary

  2010-10-01
• Test Results for Mobile Device Acquisition Tool: CelleBrite UFED 1.1.3.3-Report Manager 1.6.5

  Show summary     Open resource [pdf]     (open full abstract)

  This document reports the results from testing CelleBrite UFED 1.1.3.3-Report Manager 1.6.5. "The Computer Forensics Tool Testing (CFTT) program is a joint project of the National Institute of Justice (NIJ), the research and development organization of the U.S. Department of Justice (DOJ), and the National Institute of Standards and Technology's (NIST's) Office of Law Enforcement Standards (OLES) and Information Technology Laboratory. CFTT is supported by other organizations, including the Federal Bureau of Investigation, the U.S. Department of Defense Cyber Crime Center, U.S. Internal Revenue Service Criminal Investigation Division Electronic Crimes Program, and the U.S. Department of Homeland Security's Bureau of Immigration and Customs Enforcement, U.S. Customs and Border Protection and U.S. Secret Service. The objective of the CFTT program is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. Accomplishing this requires the development of specifications and test methods for computer forensics tools and subsequent testing of specific tools against those specifications."

  National Institute of Justice (U.S.)

  National Institute of Standards and Technology (U.S.). Office of Law Enforcement Standards

  2010-10
• CIKR Monthly Open Source Cyber Digest (OSCD): May 2010

  Show summary     Open resource [pdf]     (open full abstract)

  "The Monthly Open Source Cyber Digest (OSCD) is a tailored summary of domestic and international cyber events with specific relevance to the operations of the Critical Sectors community. The OSCD is primarily a compilation and reorganization of reporting drawn from the Daily Open Source Infra- structure Report (OSIR)." This CIKR [Critical Infrastructure and Key Structures ] Edition focuses on: "DarkReading reported a single crime syndicate dubbed 'Avalanche' was responsible for some 66 percent of the phishing traffic generated in the second half of 2009, according to a report published by the Anti-Phishing Working Group (APWG). A consumer group has called on the U.S. Federal Trade Commission (FTC) to investigate Google and the Wi-Fi sniffing has prompted a class-action lawsuit that could force the company to pay up to $10,000 for each time it snatched data from unprotected hotspots, court documents show Computerworld reported. Finally, University researchers have taken a close look at the computer systems used to run today's cars and discovered new ways to hack into them IDG News Service provided."

  United States. Department of Homeland Security. Office of Infrastructure Protection

  2010-05
• Financial Services Sector Open Source Digest: May 2010

  Show summary     Open resource [pdf]     (open full abstract)

  "The Sector Open Source Digest (SOSD) is a sector-wide summary of events that have taken place during the past month domestically and internationally. The SOSD is primarily a compilation and reorganization of reporting drawn from the Daily Open Source Intelligence Report (OSIR). The SOSD may also contain additional reporting not originally published in the OSIR. The source materials for the OSIR and SOSD are found using open source research methodologies and include imagery; local, national, and international media reports; academia and industry sources; multimedia and blogs; and other relevant publicly available sources. The SOSD is a compilation of unclassified source material and does not provide analysis or projection. The content found within the SOSD is strictly for sector situational awareness." Articles in this edition include: "Telecom DoS [Department of State] hides cyber crime", "Two-thirds of all phishing attacks generated by a single criminal group, researchers say"; "Authorities arrest first suspect in massive identity-theft ring"; "Schapiro: SEC may push for market circuit-breakers"; "Researcher finds new type of phishing attack"; "3 dead in fire at Greek bank during Athens riots"; "Sad stories as mortgage scam complaints leap"; "FBI [Federal Bureau of Investigation] promises action against money mules"; "Underground broker network a bane in terror probes"; "RBC Bank, Wachovia, SunTrust on Weiss list of vulnerable banks"; and "Walmart to support smartcard payments".

  United States. Department of the Treasury. Financial and Banking Information Infrastructure Committee

  2010-05
• Department of Defense Directive 5505.13E: DoD Executive Agent (EA) for the DoD Cyber Crime Center (DC3)

  Show summary     Open resource [pdf]     (open full abstract)

  This Department of Defense (DoD) Directive "directs the establishment of DC3 [DoD Cyber Crime Center] as an entity within the Department of the Air Force and establishes the functions of DC3. [It also d]esignates the Secretary of the Air Force (SECAF) as EA [executive agent] for DC3, including its subordinate digital and multimedia forensics laboratory services and cyber investigative training services."

  United States. Department of Defense

  2010-03-01
• Identity Theft: Trends and Issues [January 5, 2010]

  Show summary     Open resource [pdf]     (open full abstract)

  "An increase in globalization and a lack of cyber borders provide an environment ripe for identity thieves to operate from within the nation's borders--as well as from beyond. Federal law enforcement is thus challenged with investigating criminals who may or may not be operating within U.S. borders; may have numerous identities--actual, stolen, or cyber; and may be acting alone or as part of a sophisticated criminal enterprise. In addition, identity theft is often interconnected with various other criminal activities. These activities range from credit card and bank fraud to immigration and employment fraud. In turn, the effects felt by individuals and businesses who have fallen prey to identity thieves extend outside of pure financial burdens; identity thieves affect not only the nation's economic health, but its national security as well. Consequently, policymakers may debate the federal government's role in preventing identity theft and its related crimes, mitigating the potential effects of identity theft after it occurs, and providing the most effective tools to investigate and prosecute identity thieves. This report first provides a brief federal legislative history of identity theft laws. It analyzes the current trends in identity theft, including prevalent identity theft-related crimes, the federal agencies involved in combating identity theft, and the trends in identity theft complaints and prosecutions. The report also discusses the relationship between data breaches and identity theft as well as possible effects of the FTC's Identity Theft Red Flags Rule, effective June 1, 2010. It also examines current legislation on identity theft and possible issues for the 111th Congress to consider."

  Library of Congress. Congressional Research Service

  Finklea, Kristin M.

  2010-01-05
• Ensuring Student Cyber Safety, Hearing Before the Subcommittee on Healthy Familites and Communities, Committee on Education and Labor, U.S. House of Representatives, One Hundred Eleventh Congress, Second Session, Hearing Held in Washington, DC, June 24, 2010

  Show summary     Open resource [pdf]     (open full abstract)

  From the opening statement Carolyn McCarthy: "I now recognize myself, followed by the Healthy Families and Communities ranking member, Todd Platts. I would like to welcome our witnesses to this hearing on ensuring student cyber safety. As a nurse for over 30 years, I have seen firsthand the damage and the loss families can experience from bullying. The emerging world of cyber-bullying is taking a toll on our students in ways we couldn't even imagine just a few years ago. Traditional acts of bullying extend beyond the halls of our school buildings and have found a new home on the Internet. Through this hearing we will explore areas of concern related to cyber-bullying and how it is compounded by additional forms of bullying. While the overwhelming number of our students are safe, it is a parent's worse nightmare to learn that their child has become a victim of crime or other incident. Acts of bullying can quickly escalate into cyber-bullying which, as we know, is far reaching and can lead to outbreaks of violence. According to a February 2010 Pew report, 73 percent, 73 percent of wired American teens now use social networking Web sites. A significant increase from previous surveys. Another recent Pew report found that daily text messaging among American teens has shot up in the past year and a half. Thirty-eight percent in February of 2008 to 54 percent in September 2009. It is not just frequency, teens are sending enormous quantities of text messaging every single day. Half of our teens send 50 or more text messages a day, and 1 in 3 more send more than 100 text messages a day." Statements, letters, and materials submitted for the record include those of the following: Carolyn McCarthy, Todd Russell Platts, Parry Aftab, Dave Finnegan, Phillip C. McGraw, Dominique Napolitano, Barbara-Jane Paris and Jorge C. Srabstein.

  United States. Government Printing Office

  2010
• Current and Projected National Security Threats to the United States, Hearing Before the Select Committee on Intelligence, United States Senate, One Hundred Eleventh Congress, Second Session, February 2, 2010

  Show summary     Open resource [pdf]     (open full abstract)

  From the opening statement of Dianne Feinstein: "This hearing presents an annual opportunity to focus on the threats our nation faces, and it provides a rare forum for the public to receive strategic intelligence analysis. I think that right now the top threat on everyone's mind is the heightened terrorism threat, especially against our own homeland. The committee has held hearings in the past two weeks to review the Christmas Day attempted attack by Umar Farouk Abdulmutallab and the Fort Hood shootings by United States Army Major Nidal Hassan. We have also reviewed the attack on CIA's [Central Intelligence Agency] Khowst base in eastern Afghanistan on December 30th, the most deadly attack against CIA personnel in decades. [...] Let me shift from terrorism to the topic that DNI [Director of National Intelligence] Blair highlights in his written testimony, the threat to our government, public and private sector from cyber espionage, crime and attack. Director, your description of the problem is very blunt, and I believe it to be accurate. The need to develop an overall cyber security strategy is very clear. This committee has carefully examined cyber security through five hearings in the past year, carefully reviewed various cyber attacks and penetrations from foreign actors and appointed a cyber task force of three members--Senators Whitehouse, Mikulski and Snowe--to conduct a six-month analysis of our government's current plans. The task force will be reporting to the full committee shortly. [...] It is also worth noting that this country has stated its willingness to cooperate internationally on these matters. There are far more developments around the world that threaten the national security interests of the United States. The past year saw a Taliban surge in Afghanistan that led to the President's decision to shift strategy and increase troop levels. Pakistan continues to be an uneven partner in our counterterrorism and counterinsurgency efforts. Somalia and Yemen are failed and failing states that require enormous attention. These and many other threats are outlined in the DNI's testimony." Statements, letters, and materials submitted for the record include those of the following: Dianne Feinstein, Christopher S. Bond, Dennis Blair, Leon Panetta, Robert S. Mueller, III, Ronald Burgess, John Dinger, Ronald Weich, and Russ Feingold.

  United States. Government Printing Office

  2010
• Using Partnerships to Combat Cyber Threats

  Show summary     Open resource [pdf]     (open full abstract)

  From the opening of Robert S. Mueller's speech: "From the opening of Robert S. Mueller's speech: 'We live in a wired world. Our networks help us to stay in touch with family and friends, collaborate with colleagues worldwide, and shop for everything from books to houses. They help us manage our finances and make businesses and government more efficient. But our reliance on these networks also makes us vulnerable. Criminals can use the Internet to commit fraud and theft on a grand scale, and to prey upon our children. Spies and terrorists can exploit our networks to steal our secrets, attack our critical infrastructure, and threaten our national security. And because the web offers near-total anonymity, it is difficult to discern the identity, the motives, and the location of an intruder. Yet for too many individuals and businesses, cyber crime remains a nebulous concept. So today, I want to talk about the evolving nature of cyber threats, what the FBI [Federal Bureau of investigation] is doing to combat them, and how we can work together to keep them at bay."

  United States. Federal Bureau of Investigation

  Mueller, Robert S., III, 1944-

  2010
• Cyberbullying and other Online Safety Issues for Children, Hearing Before the Subcommittee on the Crime, Terrorism, and Homeland Security of the Committee on the Judiciary, House of Representatives, One Hundred Eleventh Congress, First Session, on H.R. 1966 and H.R. 3630, September 30, 2009

  Show summary     Open resource [pdf]     (open full abstract)

  From the opening statement of Robert C. Scott: "The term 'cyberbullying' has many different definitions and can cover many different types of speech. It can consist of rumors or lies, a publication of something meant to be private, or the impersonation of another person. Or it can encompass more problematic speech, involving threats, stalking, or predatory behavior. [...] H.R. 1966, the 'Megan Meier Cyberbullying Prevention Act,' addresses the problem by creating a new Federal crime prohibiting communications made with the intent to coerce, intimidate, harass, or cause substantial emotional distress that use electronic means to support severe, repeated, and hostile behavior. [...] H.R. 3630, the 'Adolescent Web Awareness Requires Education Act,' the 'WARE Act,' seeks to address the problem of online safety issues for youth, including cyberbullying, through education and prevention. It creates a grant program to be implemented by the Attorney General in accordance with best practices and authorizes $125 million for grants to carry out Internet crime awareness and cyber-crime prevention programs." Statements, letters, and materials submitted for the record include those of the following: Robert C. Scott, Subcommittee Chair (D-VA); Louie Gohmert, Ranking Member (R-TX), Linda T. Sanchez, (D-CA); Debbie Wasserman Schultz (D-FL); Robert M. O'Neil, Law Professor Emeritus, University of Virginia; Judi Westberg Warren, President, Web Wise Kids; Harvey A. Silverglate, Attorney, Zilkind, Rodriguez, Lunt and Duncan, LLP; Nancy Willard, Director, Center for Safe and Responsible Internet Use; and John Palfrey, Law Professor, Harvard Law School.

  United States. Government Printing Office

  2010
• Readout of Secretary Napolitano's Tour of the ICE Cyber Crimes Center [October 13, 2009]

  Show summary     Open resource [pdf]     (open full abstract)

  "Department of Homeland Security Secretary Napolitano today toured the U.S. Immigration and Customs Enforcement (ICE) Cyber Crimes Center (C3)--a multifaceted facility for investigating international criminal activity conducted on or facilitated by the Internet. 'Cybersecurity is a critical part of our mission to protect our country,' said Secretary Napolitano. 'The ICE Cyber Crimes Center supports our law enforcement partners across the country through state-of-the-art technology and cutting-edge cyber crime training.'"

  United States. Department of Homeland Security. Press Office

  2009-10-13
• Remarks by Secretary Napolitano at the Global Cyber Security Conference [August 4, 2009]

  Show summary     Open resource [pdf]     (open full abstract)

  This Press Release presents the remarks made by Department of Homeland Security (DHS) Secretary Janet Napolitano at the Global Cyber Security Conference in Washington D. C. "I want to thank the Secret Service, S&T [DHS Science and Technology Directorate]--of our office for hosting this meeting on cybersecurity--an area that has commanded special attention from me in my office since I began my tenure as Secretary. Indeed, even before--at the state level as we repeatedly saw our state systems hacked into--it is not a threat of the future. It is an actuality. Indeed, it was just about a year ago today that criminal charges came from a Secret Service investigation into the theft and sale of 40 million credit card numbers by an international group of cyber criminals. And that case, I believe, was just the tip of the iceberg in terms of the damage that cyber crime, cybersecurity can entail. We have to look at the landscape now; but, more important, we have to--I think--acknowledge amongst ourselves that in terms of cybersecurity we've been living in a cyber 1.0 world and we need to be cyber 3.0 and beyond. Because the minute we start talking about a particular methodology of cyber the cyber bad guys are already moving ahead. This is a very, very rapidly evolving environment in which real crime and real damage can occur."

  United States. Department of Homeland Security. Press Office

  2009-08-04
• United States Secret Service Signs Partnership Agreement with Italian Officials Establishing the First European Electronic Crimes Task Force: New Task Force to Combat Transnational Cyber Crime [July 6, 2009]

  Show summary     Open resource [pdf]     (open full abstract)

  In this Press Release the United States Secret Service announces: "Creating the first European Electronic Crimes Task Force, the United States Secret Service has signed a memorandum of understanding with Italian police and postal officials to combat cybercrime. The task force, based on the U.S. Secret Service's highly successful domestic Electronic Crimes Task Force model, will be based in Rome, Italy, to provide a forum through which U.S. and European law enforcement agencies, the private sector and academia can collaborate to investigate, suppress and prevent computer-related crimes."

  United States. Secret Service

  2009-07-06
• International Cyber Security Conference Final Report

  Show summary     Open resource [pdf]     (open full abstract)

  The Center for Technology and National Security Policy (CTNSP) hosted the "Challenges in International Cyber Security" conference at the National Defense University (NDU) on April 29-30, 2009. Twelve key observations during the conference were: "There is, in essence, but one network in cyberspace and all stakeholders have to cooperate in securing that network for every user; Developing effective defenses requires improved mechanisms of indication and warning, increased situational awareness, and the employment of advanced technology; There is broad consensus that international dialogue on cyber governance, crime and security is imperative and overdue; The potential for warfare in the cyber domain will be determined by three factors - the development of laws, a deterrence construct, and operations; Cyber threats are by their very nature asymmetrical and credible deterrence requires at least the capability to respond in kind to cyber attacks; There are three general levels of 'bad' cyber activity - individual hackers, organized criminal activity, and nation state on nation state attacks; The first requirement when seeking to coalesce cyberspace governance is the recognition that spoken and written words form the foundation of our understanding of cyberspace and its governance; The U.S. and others have not fully established national governance over cyberspace matters; We have entered an age of global interdependency in terms of national security and financial stability; When assessing international prospects for future cyber security efforts, considerations of statute and law are essential first order tasks; The international community needs to federate monitoring efforts not just among governments but also across the public-private divide; Meshing commercial goals with national security goals will further incentivize close cooperation and security advances."

  National Defense University. Center for Technology and National Security Policy

  Barry, Chuck; Lee, Lauren; Rewers, Marek

  2009-06
• Impact of Alleged Russian Cyber Attacks

  Show summary     Open resource [pdf]     (open full abstract)

  "High profile cyber attacks against Estonia and Georgia have brought the subject of cyber security from the realm of internet magazines to main stream media outlets. The cyber attacks advanced the perceptions of animosity between the Russian Federation and former Soviet satellites. The cyber attacks that have occurred in the last few years have shown the vulnerabilities of using the internet and the weaknesses of cyber defenses. There is little concrete proof of involvement of the Russian Federation government in any cyber attacks. The circumstantial evidence does lead to the perception that the Russian government was behind or supported recent cyber attacks. When countries or organizations stand in opposition to Russia they are likely to receive a cyber attack in order to influence their position. Government and organizational leaders need to ensure that their cyber defenses are ready to protect private information, internet services and electrical grids that rely on internet technology to function. Former Soviet satellites, the United States, and international organizations need to strive to increase international co-operation in order to defeat cyber crime. Without a legal international framework cyber criminals will continue to operate in areas where there are no laws or agreements concerning cyber security."

  U.S. Army Command and General Staff College. School of Advanced Military Studies

  Ashmore, William C.

  2009-05-21
• Taxonomies of Cyber Adversaries and Attacks: A Survey of Incidents and Approaches

  Show summary     Open resource [pdf]     (open full abstract)

  "In this paper we construct taxonomies of cyber adversaries and methods of attack, drawing from a survey of the literature in the area of cyber crime. We begin by addressing the scope of cyber crime, noting its prevalence and effects on the US economy. We then survey the literature on cyber adversaries, presenting a taxonomy of the different types of adversaries and their corresponding methods, motivations, maliciousness, and skill levels. Subsequently we survey the literature on cyber attacks, giving a taxonomy of the different classes of attacks, subtypes, and threat descriptions. The goal of this paper is to inform future studies of cyber security on the shape and characteristics of the risk space and its associated adversaries."

  Lawrence Livermore National Laboratory

  Powers, Shawn; Meyers, Carol; Faissol, Daniel

  2009-04
• Organizing the U.S. Government for National Security: Overview of the Interagency Reform Debates [December 16, 2008]

  Show summary     Open resource [pdf]     (open full abstract)

  "A growing community of interest, including Members of Congress, senior officials in the executive branch, and think-tank analysts, is calling for a reexamination of how well the U.S. government, including both the executive branch and Congress, is organized to apply all instruments of national power to national security activities. The organizations and procedures used today to formulate strategy, support presidential decision-making, plan and execute missions, and budget for those activities are based on a framework established just after World War II. That framework was designed to address a very different global strategic context: a bipolar world with a single peer competitor state, the Soviet Union, which was driven by an expansionist ideology and backed by a massive military force. Six decades later, in the wake of 9/11, many observers and practitioners note, the United States faces greater uncertainty and a broader array of security challenges than before, including nonstate as well as traditional state-based threats, and transnational challenges such as organized crime, energy security concerns, cyber attacks, and epidemic disease. The 'outdated bureaucratic superstructure' of the 20th century is an inadequate basis for protecting the nation from 21st century security challenges, critics contend, and the system itself, or alternatively, some of its key components, requires revision. [...]The purpose of this report, which will be updated as events warrant, is to help frame the emerging debates for the 111th Congress by taking note of the leading advocates for change, highlighting identified shortcomings in key elements of the current system, and describing categories of emerging proposals for change."

  Library of Congress. Congressional Research Service

  Serafino, Nina M.; Towell, Pat; Dale, Catherine

  2008-12-16
• Headline Archive: 'Dark Market' Takedown: Exclusive Cyber Club for Crooks Exposed

  Show summary     Open resource [pdf]     (open full abstract)

  This Federal Bureau of Investigation (FBI) Headline Archive entitled " 'Dark Market' Takedown: Exclusive Cyber Club for Crooks Exposed," discusses an FBI two-year undercover cyber operation that concluded recently. The following is taken from the article, '...A discerning group of cyber criminals established a forum on the Internet called 'Dark Market,' where they bought and sold stolen financial information such as credit card data, login credentials (user names and passwords), and even electronic equipment for carrying out financial crimes. ...At its peak, this vast criminal network had over 2,500 registered members, who all believed they were operating in a protected cyber environment because they went to great lengths to vet members and to weed out undesirable elements. ...What they didn't know was that one of the site's administrators and most respected members, who called himself Master Splyntr, was one of us--an undercover FBI agent who had infiltrated the site posing as a cyber crook. 'It was a group of people who trusted each other,' said the undercover agent after the arrests. He explained that there are two types of cyber criminals: those who steal, but not from one another, and 'rippers,' who steal from anyone. Keeping the rippers off the Dark Market site, the agent explained, gave the other members a false sense of confidence. 'They did a good job of trying to be secure, and they felt secure. There was honor among thieves, so to speak."

  United States. Federal Bureau of Investigation

  2008-10-20
• Cyber Threat Today: Major Attacks on the Rise

  Show summary     Open resource [pdf]     (open full abstract)

  The Federal Bureau of Investigation released an article describing how the number of e-attacks being waged against United States interests is on the increase. "Crooks and spies using the Internet to commit crimes against U.S. businesses and to attack government networks are getting more sophisticated, and the increasing number of such crimes not only impacts the economy but threatens national security. That's the message Shawn Henry, recently appointed head of our Cyber Division, delivered to a group of reporters on Wednesday, revealing that we have thousands of open cases into cyber crimes and organized cyber attacks and detailing our strategy to protect the nation's networks. One case in point: We joined our international partners yesterday in announcing a major takedown of a transnational criminal network that was buying and selling stolen financial information through an online forum known as 'Dark Market.' 'The business of the United States is done on the Internet,' said Henry, a veteran cyber crime investigator. And the information that flows electronically 24/7 is increasingly the target of not only identity thieves and scammers, but organized crime groups, terrorists, and overseas governments."

  United States. Federal Bureau of Investigation

  2008-10-17
• FY2009 Appropriations for State and Local Homeland Security [Updated October 10, 2008]

  Show summary     Open resource [pdf]     (open full abstract)

  "This report is an overview of the FY2009 appropriations for the Department of Homeland Security (DHS) programs for states and localities that are designed to provide assistance to state and local governments." "Congress appropriated, in P.L. 110-329, approximately $4.36 billion for state and local homeland security assistance programs. This is approximately $135 million more than was appropriated in FY2008 ($4.22 billion). Congress chose not to fund the Real ID program in FY2009, however, it did appropriate funding ($2 million) for a new assistance program titled the Center for Counterterrorism and Cyber Crime at Norwich University in Northfield, Vermont. This report will not be updated."

  Library of Congress. Congressional Research Service

  Reese, Shawn

  2008-10-10
• Test Results for Mobile Device Acquisition Tool: Guidance Software Neutrino 1.4.14

  Show summary     Open resource [pdf]     (open full abstract)

  "This document reports the results from testing Guidance Software Neutrino, version 1.4.14, against the GSM Mobile Device and Associated Media Tool Specification and Test Plan Version 1.1, available at the CFTT Web site." "The Computer Forensics Tool Testing (CFTT) program is a joint project of the National Institute of Justice (NIJ), the research and development organization of the U.S. Department of Justice (DOJ), and the National Institute of Standards and Technology's (NIST's) Office of Law Enforcement Standards and Information Technology Laboratory. CFTT is supported by other organizations, including the Federal Bureau of Investigation, the U.S. Department of Defense Cyber Crime Center, U.S. Internal Revenue Service Criminal Investigation Division Electronic Crimes Program, and the U.S. Department of Homeland Security's Bureau of Immigration and Customs Enforcement, U.S. Customs and Border Protection, and U.S. Secret Service. The objective of the CFTT program is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. Accomplishing this requires the development of specifications and test methods for computer forensics tools and subsequent testing of specific tools against those specifications."

  United States. Office of Justice Programs

  2008-10
• Cyber Security for the 44th Presidency: Hearing before the U.S. House of Representatives Permanent Select Committee on Intelligence, One Hundred Tenth Congress, Second Session, September 18, 2008

  Show summary     Open resource [pdf]     (open full abstract)

  This testimony compilation is from the September 18, 2008 hearing, "Cyber Security for the 44th Presidency," before the U.S. House of Representatives Permanent Select Committee on Intelligence. From Paul Kurtz' opening statement: "Cyber security is one of the most serious economic and national security challenges we will face in the 21st century. U.S. Government leadership is vital to mitigating massive problems with our information infrastructure. Our current information infrastructure is riddled with holes, unknown backdoors, and is extremely difficult to protect in the face of increasingly sophisticated adversaries. Unlike Y2K [Year 2000], there is no single fix. Adversaries are not limited to nation states' military and intelligence organizations. Criminals, organized crime, terrorists, malicious insiders, and business competitors can and do engage. The battle in cyberspace is just beginning. It is destined to be complicated and costly. There is an urgent need to understand the problem and set the foundations for a more secure, reliable, resilient information infrastructure that can operate in an increasingly hostile environment." Statements, letters, and materials submitted for the record include those of the following: Paul Kurtz, Former Senior Director, Critical Infrastructure Protection White House Homeland Security Council, Amit Yoran, Former Director, National Cyber Security Division, Department of Homeland Security, John Nagengast, Former Assistant Deputy Director, National Security Agency.

  United States. Congress. House. Permanent Select Committee on Intelligence

  2008-09-18
• Department of the Navy: Cyber Crime Handbook

  Show summary     Open resource [pdf]     (open full abstract)

  This Department of the Navy Cyber Crime Handbook "provides an overview of the definitions, criminal techniques, electronic laws, incident reporting and responses regarding cyber threats to DON personnel and the Department's global network infrastructure."

  United States. Naval Criminal Investigative Service

  2008-07-28