Follow this blog:
RSS

Darpa’s top hacker works to protect Pentagon from WikiLeaks and others

By | September 3, 2010, 1:14 AM PDT

After WikiLeaks passed some 77,000 mostly-classified Defense Department documents to three major international publications, the mood at the Pentagon changed. There had until that point been a push from Defense Secretary Gates to make more documents available to enlisted men and women at all levels, under the theory that the more information one has, the better one can do a job.

But the WikiLeaks debacle alerted the Pentagon that perhaps this strategy was not the smartest. A solution was needed–a way to allow the military to have as much information as possible without allowing it to be swiped by someone wanting a story.

So the Pentagon did what any top governmental organization would do: They asked Darpa.

Interestingly, Darpa’s solution (as difficult as it sounds) is headed by none other than Peiter “Mudge” Zatko, a famous former hacker who, as Wired notes, once claimed he and his crew could “shut down the Internet in 30 minutes.” (This, we should note, was well before Zatko was on the government’s payroll.)

The solution, proposed by Zatko and his team, is a sophisticated monitoring system called CINDER (which, somehow, stands for Cyber Insider Threat). Though it has yet to be built, the plan is that CINDER will be equipped with complex algorithms to detect unusual behavior from those on the network.

Of course, that kind of system necessarily lands on tons of false positives, which is why the software is designed to look not for perpetrators, but plans. Perpetrators can be caught later; the more pressing problem is halting whatever plan has been hatched. To that end, CINDER researchers will “make use of logs and accounting information that tracks allowed activities rather than depending entirely on alerts from monitoring systems focused on anomalous or disallowed activities.”

CINDER is years off, but Secretary Gates seems bullish on the project, mentioning the project implicitly in a speech in July.

Start your week smarter with our weekly e-mail newsletter. It's your cheat sheet for good ideas. Get it.

Dan Nosowitz

About Dan Nosowitz

Dan Nosowtiz was a contributing editor for SmartPlanet in 2010.

Dan Nosowitz

Dan Nosowitz

Contributing Editor, Technology

Dan Nosowitz has written for Popular Science, Fast Company and Gizmodo. He holds a degree from McGill University in Canada. He is based in New York.

Follow him on Twitter.

Dan Nosowitz

Dan Nosowitz

Dan Nosowitz does not hold any investments in the technology companies he covers.

He writes for SmartPlanet and is not an employee of CBS.

4
Comments

Join the conversation!

Follow via:
RSS
0 Votes
+ -
RE: Darpa's top hacker works to protect Pentagon from WikiLeaks and others
enforcing ignorance by the governent by way of the hands of hackers now are we?

funny how the west looks down their nose at china and russia doing the same thing, yet when the US does it it's somehow patriotic.

as for the hackers claim... he can keep dreaming... arrogant techno-geek... if it was possible or even likely to occur the chinese or the US military would have done it long before now... esspecially as the bigger the internet network become the harder it will be to shut it down... at least barring the use of a dozen or more nukes used as EMP, and whatever country did that would be reduced to a crater, likely a radioactive crater. i'm sure he could do a fair bit of damage or steal a fair bit of information but the ability to bring down the internet on a whim is every black hats biggest wet dream (white hats would never even talk about bringing down the internet in the first place, and black hats are the malicious hackers that really ought not to be allowed on internet in the first place esspeciall given their stated intrest which is akin to saying you can bring down every major country in 30 minute, which is nothing short of a idle threat of terrorism [cyber terrorism in this case], hackers like kevin mitnick are saints campared to the hackers the militaries of the world enlist)... but at the end of the day that all it is... a dream... the ability to bring down the internet mean nothing, you don't also haver the ability to get it back, which even if in theory he could bring the whole thing down, he wouldn't be able to get it back up, it would have to be rebuilt line by line like it has been since internet was implemented in 1969 as a response to the soviets having space based capabilities before they did.
Posted by Daryl420
3rd Sep 2010
0 Votes
+ -
RE: Darpa's top hacker works to protect Pentagon from WikiLeaks and others
CINDER will be useful to agencies beyond the Pentagon. The intelligence community, obviously, but also law enforcement - the money that smugglers have used to corrupt Mexican law enforcement will, if not already, be spent on bribes on our side of the border.
Posted by hoodedswan
3rd Sep 2010
0 Votes
+ -
what
Do you mean DARPA?
Posted by dgurney
6th Sep 2010
0 Votes
+ -
RE: Darpa's top hacker works to protect Pentagon from WikiLeaks and others
Thank you Daryl420 for some excellent comedic relief. I'm
actually quite surprised that you posted on here since the
sinister government "Big Brothers" can and are tracing every
keystroke....lol
No one(credible that is) is proposing "enforcing ignorance by
the governent by way of the hands of hackers." As you so
convincingly demonstrate, there's more than enough of that to
go around all ready. You obviously don't have ANY idea of the
amount and types of information that actually resides on, and
passes through, military web uses/channels alone. If you did, you
would realize that publication of some classified information can
actually cost lives and permanently compromise our national
security. The normal gripe about the communist, and formerly
communist, regimes you noted, wasn't/isn't about classified data.
It was about the fact that the information available to the people
of those countries was completely controlled by their
governments.(further details are available in most 8th grade
social studies books) The size of the internet is not at all
germain as far as the ability to shut it down when you are talking
about interconnected communications on the web at the speed
of light(299,792,458 meters/second in a vacuum). Furthermore,
thermo-nuclear devices are typically delivered via MIRV's these
days, so a dozen of them would be extreme overkill if you're only
attempting to shut down the internet. Also, "nukes" aren't even
needed to generate an EMP burst. Devices of sufficient power
could be easily mounted and deployed on platforms as small as
tractor-trailer rigs.
With regards to bringing down the entire net, before you go
calling him an "arrogant techno-geek" you might want to actually
read up on governmental and independent source analysis of
the state of our efforts against "cyber-terrorists." For example,
the power-grid in the U.S. is highly computerized, but extremely
unprotected from external electronic attacks. Simple math says:
No power = No internet.
I could go on and on rebutting your child-like conspiracy
theories, but you should probably put your tin-foil hat back on
and go sit in a dark corner and suck your thumb whilst you hide
from "them." BOOOH !!
Posted by Datadad
7th Sep 2010
Join the conversation
Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]

Join the SmartPlanet Community and join the conversation! Signing-up is free and quick, Do it now, we want to hear your opinion.