Policy Archives

Tag: Policy

Metadata Matters: EFF To Argue Collection Violates Constitution

November 4, 2014 Paul Roberts

Lawyers from The Electronic Frontier Foundation will argue on Tuesday that the U.S. government’s bulk collection of phone records and other “metadata” is a violation of the Constitution’s protection against unlawful searches. In a blog post on Monday, EFF said that it plans to make oral arguments before the D.C. Circuit Court of Appeals on Tuesday and will argue that the call records collected by the government constitute “intimate portraits of the lives of millions of Americans” that are protected under the Constitution’s Fourth Amendment. The EFF is presenting in the Klayman vs. Obama, a 2013 case filed by Larry Klayman, conservative activist, in the immediate aftermath of the publication of data leaked by former NSA contractor Edward Snowden. EFF and the ACLU filed an amicus brief in that case in August. The government’s argument is that the bulk collection of phone records is legal under a precedent called “third party doctrine,” which […]

Essentials for Visibility-Driven Security

October 27, 2014 Scott Harrell

Visibility is surprisingly tricky. The security industry offers many disparate tools to provide customers “visibility” into what is happening on their networks. Among them are tools that track what applications are on the network, tools for enumerating and tracking software vulnerabilities, tools for determining when sensitive data has left a network, tools that indicate when attacks are underway and tools that identify and analyze network data flows – to name just a few. Of course, layered on top of all this “visibility” are further systems that correlate and analyze what the mission-specific tools are seeing. Promises of a “single pane of glass” aside, the result is often a mishmash of data and events that require skilled security practitioners to analyze and interpret. The mishmash, in turn, leads to errors in analysis and prioritization. Albert Einstein famously said “Any fool can know. The point is to understand.” So it is in the information security industry, where a common refrain is “you can’t protect […]

Congress To Probe the Internet of Things?

October 25, 2014 Paul Roberts

A bipartisan contingent of senators from the Commerce, Science and Transportation Committee has requested a hearing on the topic of the Internet of Things before the end of the year, according to published reports. Lawmakers Kelly Ayotte (R-N.H.), Cory Booker (D-N.J.), Deb Fischer (R-Neb.) and Brian Schatz (D-Hawaii) wrote to the committee chairman, Jay Rockefeller (D-W.Va.) and ranking member,John Thune (R-S.D.), requesting “a general oversight and information-gathering hearing” on the IoT before the end of 2014, citing concerns about consumer privacy and security, as well as potential government applications of IoT technology. IoT technologies including wearables and connected health products represent an “expanding industry of connected products,” the congressmen and women wrote. “The proliferation of connected products is sparking a number of important policy questions,” the October 20th letter reads. “The number and the scope of these issues demands our prompt attention so we can better understand the technologies and explore how best to preserve America’s global leadership […]

Obama Uses Executive Order To Push Chip and Pin

October 17, 2014 Paul Roberts

Add data security to the long list of issues on which U.S. President Barack Obama has resorted to unilateral action in order to push the government forward on a crucial matter. On Friday, President Obama signed an Executive Order directing the government to require the use of so-called “chip and PIN” technology for any newly issued or existing government debit and credit cards. The Order was intended to make the federal government “lead by example in securing transactions and sensitive data,” the White House said in a statement. The new BuySecure Initiative will provide consumers with more tools to secure their financial future by assisting victims of identity theft, improving the Government’s payment security as a customer and a provider, and accelerating the transition to stronger security technologies and the development of next-generation payment security tools. The Order launches a new initiative dubbed “BuySecure” intended to “drive the market towards more secure payment systems” […]

McKinsey: Consumers Want Connected Cars – And Fear Them, Too

October 9, 2014 Paul Roberts

The consulting firm McKinsey & Co. has released an interesting report on the future of connected vehicles. But it has some sobering data for car makers: concerns about privacy and the possibility that connected cars could be hacked are major concerns for consumers that could dampen enthusiasm for smart vehicles. The report, “What’s Driving the Connected Car?” finds that connectivity features will be a major driver of car sales in the coming years, with car buyers increasingly accustomed to vehicles that sport sophisticated interactive and networking features. That said: security concerns may hamper the “rapid and broad adoption” of connected vehicle technology. For its report, McKinsey interviewed 2,000 new car buyers in four countries: Brazil, China, Germany and the U.S. The survey found that a quarter of respondents considered connectivity a more important feature than engine power or even fuel efficiency. The firm estimates that connectivity features will become increasingly important selling features […]