Groups Warn Of Privacy Concerns In Cybersecurity Bills

InfoSec News <[email protected]> Fri, 10 Feb 2012 04:18:38 -0600 (CST)
Newsgroups gmane.comp.security.attrition.infosec-news
Message-ID <[email protected]>
  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--742952673-1684338050-1328867991=:17375
Content-Type: TEXT/PLAIN; FORMAT=flowed; CHARSET=UTF-8
Content-ID: <alpine.DEB.2.02.1202100418262.17627-+lq4ijtN3NWD1tnzEPnUTA@public.gmane.org>
Content-Transfer-Encoding: quoted-printable

http://www.nationaljournal.com/tech/groups-warn-of-privacy-concerns-in-cy=
bersecurity-bills-20120209

By Josh Smith
National Journal
February 9, 2012

Some efforts to share more information about cyberthreats could open a=20
Pandora=E2=80=99s Box of privacy and civil rights concerns, civil liberti=
es=20
advocates said on Thursday.

As Congress looks to pass wide-ranging cybersecurity legislation this=20
year, several bills included proposals for increasing the flow of=20
information between government agencies and private companies.

If not implemented carefully, such measures could undermine privacy and=20
other limits on government intrusion, the Center for Democracy and=20
Technology=E2=80=99s Gregory Nojeim said at a Capitol Hill briefing for=20
staffers.

Two issues are of particular concern, he said. The amount and type of=20
information that is collected or shared needs to be narrowly limited;=20
and the use of that information needs to be used only for cybersecurity=20
efforts, not other, unrelated crimes. Nojeim praised a bill approved by=20
a House Homeland Security subcommittee on Feb. 1 that creates a=20
quasi-governmental organization to oversee information sharing and=20
defines what information can be shared.

=E2=80=9CThere is widespread agreement that ISPs (internet service provid=
ers)=20
and other operators of computer networks need clearer legal authority in=20
order to be able to share with each other =E2=80=93 and with the governme=
nt --=20
signatures and other information about suspected attacks on their=20
networks,=E2=80=9D Nojeim wrote in a summary of the legislation. =E2=80=9C=
However, since=20
we are talking about privately owned and operated networks that carry=20
personal communications, any sharing of information must be carefully=20
controlled.=E2=80=9D

[...]


--742952673-1684338050-1328867991=:17375
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

______________________________________________________________________________
Certified Ethical Hacker and CISSP training with Expanding Security gives
the best training and support.
Get a free live class invite weekly.  Best program, best price.
www.ExpandingSecurity.com/PainPill
--742952673-1684338050-1328867991=:17375--