Secrecy of Cyber Threats Said to Cause Complacency

The American public does not have an accurate sense of the threat posed by attacks in cyberspace because most of the relevant threat information is classified, according to Sen. Sheldon Whitehouse (D-RI), who introduced legislation last week to raise public awareness of cyber security hazards.

“The damage caused by malicious activity in cyberspace is enormous and  unrelenting,” Sen. Whitehouse said on April 14. “Every year, cyber attacks inflict vast damage on our Nation’s consumers, businesses, and government agencies. This constant cyber assault has resulted in the theft of millions of Americans’ identities; exfiltration of billions of dollars of intellectual property; loss of countless American jobs; vulnerability of critical infrastructure to sabotage; and intrusions into sensitive government networks.”

“These massive attacks have not received the attention they deserve.  Instead, we as a nation remain woefully unaware of the risks that cyber attacks pose to our economy, our national security, and our privacy,” he said.

“This problem is caused in large part by the fact that cyber threat information ordinarily is classified when it is gathered by the government or held as proprietary when collected by a company that has been attacked. As a result, Americans do not have an appropriate sense of the threats that they face as individual Internet users, the damage inflicted on our businesses and the jobs they create, or the scale of the attacks undertaken by foreign agents against American interests.”

With Sen. Jon Kyl (R-AZ), Sen. Whitehouse introduced the “Cyber Security Public Awareness Act” to require government agencies to provide increased public reporting of cyber threat information.

“As of 2011, the level of public awareness of cyber security threats is unacceptably low. Only a tiny portion of relevant cyber security information is released to the public. Information about attacks on Federal Government systems is usually classified. Information about attacks on private systems is ordinarily kept confidential. Sufficient mechanisms do not exist to provide meaningful threat reports to the public in unclassified and anonymized form,” the bill stated.

Last year, Sen. Whitehouse chaired a bipartisan Senate Intelligence Committee task force on cyber security.

“The government keeps the damage we are sustaining from cyber attacks secret because it is classified,” he said last November. The private sector keeps the damage they are sustaining from cyber attacks secret so as not to look bad to customers, to regulators, and to investors. The net result of that is that the American public gets left in the dark.”

No Responses to “Secrecy of Cyber Threats Said to Cause Complacency”

  1. George Smith April 18, 2011 at 4:48 PM #

    “These massive attacks have not received the attention they deserve. Instead, we as a nation remain woefully unaware of the risks that cyber attacks pose to our economy, our national security, and our privacy,”

    Lies. And worse, the man certainly knows it. The exact opposite is true. The public has been regularly harangued about the threat from the front pages of the biggest newspapers and features in primetime news television.

    Everything Whitehouse is quoted as saying on this topic is disingenuous.

    The man might have taken the time to say what others, often far more qualified than him, frequently say. And that would be since cyberthreats have so loudly been pushed into the public discourse, it has deadened any hopes for rational debate on them other than to ask for increase in fundings.

    When all manner of things are described as deadly threats to the nation, and that has unequivocally been the nature of this discussion over more than a decade, education on the matter — such as it is — is just shock and awe.

    Classification has no effect on this. In fact, historically it has been used to amplify the argument using variations on arguments from authority to the effect that even scarier things are undiscussed. Which seems to be what this press release announcement is about.

    In practice, it’s hard to imagine how things could be delivered in a more scary or attention-getting way than they are now.

    Shame on Whitehouse for just adding to the cant.