The Joplin Globe, Joplin, MO

Business

October 22, 2012

Draft order would give companies cyberthreat info

WASHINGTON — A new White House executive order would direct U.S. spy agencies to share the latest intelligence about cyberthreats with companies operating electric grids, water plants, railroads and other vital industries to help protect them from electronic attacks, according to a copy obtained by The Associated Press.

The seven-page draft order, which is being finalized, takes shape as the Obama administration expresses growing concern that Iran could be the first country to use cyberterrorism against the United States. The military is ready to retaliate if the U.S. is hit by cyberweapons, Defense Secretary Leon Panetta said. But the U.S. also is poorly prepared to prevent such an attack, which could damage or knock out critical services that are part of everyday life.

The White House declined to say when the president will sign the order.

The draft order would put the Department of Homeland Security in charge of organizing an information-sharing network that rapidly distributes sanitized summaries of top-secret intelligence reports about known cyberthreats that identify a specific target. With these warnings, known as tear lines, the owners and operators of essential U.S. businesses would be better able to block potential attackers from gaining access to their computer systems.

An organized, broad-based approach for sharing cyberthreat information gathered by the government is widely viewed as essential for any plan to protect U.S. computer networks from foreign nations, terrorist groups and hackers. Existing efforts to exchange information are narrowly focused on specific industries, such as the finance sector, and have had varying degrees of success.

Yet the order has generated stiff opposition from Republicans on Capitol Hill who view it as a unilateral move that bypasses the legislative authority held by Congress.

Administration officials said the order became necessary after Congress failed this summer to pass cybersecurity legislation, leaving critical infrastructure companies vulnerable to a serious and growing threat. Conflicting bills passed separately by the House and Senate included information-sharing provisions. But efforts to get a final measure through both chambers collapsed over the GOP’s concerns that the Senate bill would expand the federal government’s regulatory power and increase costs for businesses.

The White House has acknowledged that an order from the president, while legally binding, is not enough. Legislation is needed to make other changes to improve the country’s digital defenses. An executive order, for example, cannot offer a company protection from liabilities that might result from a cyberattack on its systems.

The addition of the information-sharing provisions is the most significant change to an earlier draft of the order completed in late August. The new draft, which is not dated, retains a section that requires Homeland Security to identify the vital systems that, if hit by cyberattack, could “reasonably result in a debilitating impact” on national and economic security. Other sections establish a program to encourage companies to adopt voluntary security standards and direct federal agencies to determine whether existing cyber security regulations are adequate.

The draft order directs the department to work with the Pentagon, the National Security Agency, the director of national intelligence and the Justice Department to quickly establish the information-sharing mechanism. Selected employees at critical infrastructure companies would receive security clearances allowing them to receive the information, according to the document. Federal agencies would be required to assess whether the order raises any privacy or civil liberties risks.

To foster a two-way exchange of information, the government would ask businesses to tell the government about cyberthreats or cyberattacks. There would be no requirement to do so.

The NSA has been sharing cyberthreat information on a limited basis with companies that conduct business with the Defense Department. These companies work with sensitive data about weapon systems and technologies and are frequently the targets of cyberspying.

But the loss of valuable information has been eclipsed by fears that an enemy with the proper know-how could cause havoc by sending the computers controlling critical infrastructure systems incorrect commands or infecting them with malicious software. Potential nightmare scenarios include high-speed trains being put on collision courses, blackouts that last days or perhaps even weeks or chemical plants that inadvertently release deadly gases.  

Panetta underscored the looming dangers during a speech last week in New York by pointing to the Shamoon virus that destroyed thousands of computer systems owned by Persian Gulf oil and gas companies. Shamoon, which spreads quickly through networked computers and ultimately wipes out files by overwriting them, hit the Saudi Arabian state oil company Aramco and Qatari natural gas producer RasGas.

Panetta did not directly connect Iran to the Aramco and RasGas attacks. But U.S. officials believe hackers based in Iran were behind them.

Shamoon replaced files at Aramco with the image of a burning U.S. flag and rendered more than 30,000 computers useless, Panetta said. The attack on RasGas was similar, he said.

A spokeswoman for the National Security Council, Caitlin Hayden, said the administration is consulting with members of Congress and the private sector as the order is being drafted. But she provided no information on when an order would be signed. “Given the gravity of the threats we face in cyberspace, we want to get this right in addition to getting it done swiftly,” she said.

 

1
Text Only
Business
  • Business US stocks close higher for third day in a row

    Investors drove stock prices to their highest level in a week Wednesday,

    April 16, 2014 1 Photo

  • China’s growth slows to 7.4 percent in 1Q

    China’s economic growth slowed further in the latest quarter but appeared strong enough to satisfy Chinese leaders who are trying to put the country on a more sustainable path without politically dangerous job losses.

    April 16, 2014

  • A look at 3 minority business mentoring programs

    A look at minority business mentoring programs, called accelerators, in three metropolitan areas.

    April 16, 2014

  • Why high oil prices are actually good for airlines

    Airline executives frequently complain about fuel costs. But the truth is higher prices actually have been good for business.

    April 16, 2014

  • Business US stocks open higher; Yahoo soars in early trade

    U.S. stocks moved higher in early trading on Wednesday, extending their gains into a third day. Investors welcomed solid earnings from Yahoo as well as some encouraging news about China’s economy and U.S. factory production.

    April 16, 2014 1 Photo

  • Detroit strikes second deal with its other retirees

    The city of Detroit reached tentative agreements to preserve pensions for retired police office and firefighters but cut monthly payments for other former employees, key deals that could accelerate the largest public bankruptcy in U.S. history, officials said Tuesday.

    April 16, 2014

  • Missouri court expands legal rights for injured workers

    The Missouri Supreme Court has overturned 30 years of precedent with a ruling that gives greater legal protections to injured workers who are fired from their jobs.

    April 15, 2014

  • Immigration activists urge Obama to act boldly

    Latinos and immigration activists are warning of political peril for President Barack Obama and Democrats in the fall election unless the president acts boldly and soon to curb deportations and allow more immigrants to remain legally in the U.S.

    April 15, 2014

  • Farmers off to slow start planting corn crop

    Spring planting across the nation’s Corn Belt is sputtering because the soil remains too soggy or cold for effective seeding.

    April 15, 2014

  • Schreiber Foods schedules Carthage plant expansion

    Plans to expand a Schreiber Foods plant to eventually add 160 new jobs have been endorsed by a Carthage committee working with the company. Andrew Tobish, director of combinations for Schreiber, which is based in Green Bay, Wis., confirmed the project, which he said would be complete by late spring or early summer in 2015.

    April 15, 2014

Poll

The Supreme Court may take up a challenge to an Ohio law that bars false statements about political candidates during a campaign. Do you think false accusations made in the heat of an election should be punished as a crime?

A. Yes.
B. No.
     View Results
Facebook
Twitter Updates
Follow us on twitter
NDN Video
Disbanding Muslim Surveillance Draws Praise Hundreds Missing After South Korean Ferry Sinks Passengers Abuzz After Plane Hits Swarm of Bees Boston Bomb Scare Defendant Appears in Court Pistorius Trial: Adjourned Until May 5 Diaz Gets Physical for New Comedy Raw: Ferry Sinks Off South Korean Coast Town, Victims Remember Texas Blast Freeze Leaves Florida Panhandle With Dead Trees At Boston Marathon, a Chance to Finally Finish Are School Dress Codes Too Strict? Raw: Fatal Ferry Boat Accident Suspicious Bags Found Near Marathon Finish Line Boston Marks the 1st Anniversary of Bombing NYPD Ends Muslim Surveillance Program 8-year-old Boy Gets His Wish: Fly Like Iron Man Sex Offenders Arrested in Slayings of CA Women India's Transgenders Celebrate Historic Ruling Tributes Mark Boston Bombing Anniversary Raw: Kan. Shooting Suspect Faces Judge