Report: NSA To Monitor Private and Public Sector Critical Infrastructure for Cyber-Threats

ShareThis

Citing unnamed government and industry sources, the Wall Street Journal reported that the US Department of Defense's National Security Agency (NSA) is embarking on a secret domestic surveillance project called "Perfect Citizen", with the intention of monitoring and protecting important national infrastructure such as power grids and transport systems.

The report stated that that the NSA has awarded classified contracts worth $100m to defense contractor Raytheon which will oversee the installation of secret monitoring equipment within networks deemed to be of national importance. While it will not monitor the whole system, the NSA would rely on the sensors installed in the computer networks of critical infrastructure to learn of unusual activity pointing towards an impending cyber attack. The article reported that the NSA would probably kick off the project with the most critical services, such as electricity, nuclear power, and air traffic control systems given that these critical services typically use older computer control systems that were largely designed without Internet connectivity or security in mind. Now that they are being linked to the Internet to boost efficiency, they are more vulnerable to cyber attacks.

The article also noted there have been ongoing discussions between the Intelligence officials and utility representatives. The U.S. government has recognized the national-security implications of an attack on privately owned critical infrastructure. Initially, it established relationships with utility companies so it could coordinate security plans such as by requesting a power company to seal a manhole that provides access to a key power line for a government agency. More recently, they have met with utilities' CEO's to understand the gravity of the threat against U.S. infrastructure. There was also a consensus from the CEOs during these discussions about the need for better threat information and guidance on what to do in the event of a major cyber attack. Some of the crucial questions that will need to be addressed include which network systems will be monitored and how security information will be gathered. Uninhibited access to critical infrastructure networks also raises privacy concerns, as tapping into the system could provide the NSA with a details regarding the consumer power usage, or other personal identifying information.

UTC TELECOM 2012 Conference