updated 12/5/2010 12:57:02 PM ET 2010-12-05T17:57:02

It will take several more years for the U.S. government to fully install high-tech systems to block computer intrusions, a drawn-out timeline that enables criminals to become more adept at stealing sensitive data, experts say.

As the Department of Homeland Security moves methodically to pare down and secure the approximately 2,400 network connections used every day by millions of federal workers around the world, experts suggest that technology already may be passing them by.

The department that's responsible for securing government systems other than military sites is slowly moving all the government's Internet and e-mail traffic into secure networks that eventually will be guarded by intrusion detection and prevention programs. The networks are known as Einstein 2 and Einstein 3.

  1. More security news from MSNBC Tech & Science
    1. Gizmodo
      How crooks fake an ATM and steal your money

      There's no dearth of sophisticated gear for the aspirational ATM thief. But skimmers don't exactly have an aisle at Wal-Mart. Gizmodo takes a look at the scary Internet black market where fraudsters get their tools — or get swindled themselves.

    2. Man pleads not guilty to running vast spam network
    3. Charles Manson had cell phone under mattress
    4. NYT: China hacked Google, leaked cables say

Progress has been slow, however. Officials are trying to complete complex contracts with network vendors, work out technology issues and address privacy concerns involving how the monitoring will affect employees and public citizens.

The WikiLeaks release of more than a quarter-million sensitive diplomatic documents underscores the massive challenge ahead, as Homeland Security labors to build protections for all of the other, potentially more vulnerable U.S. agencies.

"This is a continuing arms race and we're still way behind," said Stewart Baker, former Homeland Security undersecretary for policy.

Story: WikiLeaks server goes down, Swiss say

The WikiLeaks breach affected the government's classified military network and was as much a personnel gap as a technological failure. Officials believe the sensitive documents were stolen from secure Pentagon computer networks by an Army intelligence analyst who downloaded them onto a CD.

The changes sought by Homeland Security on the government's nonmilitary computers would be wider and more systemic than the immediate improvements ordered recently by the Departments of Defense and State as a result of the WikiLeaks releases. Those changes included improving the monitoring of computer usage and making it harder to move material onto a portable computer flash drive or CD.

"There are very few private sector actors who depend on information security who think that installing intrusion prevention systems is sufficient protection against the kinds of attacks that we're seeing," Baker said.

Navy Rear Adm. Michael Brown, Homeland Security's director for cybersecurity coordination, said that slightly more than half of the government's 2,400 network connections are already protected by Einstein 2 — the automated system that monitors federal Internet and e-mail traffic for malicious activity.

Those, however, cover fewer than 20 of the 110 federal agencies.

Einstein 2 is installed and working at 13 of the 19 agencies that plan to police their own networks, with two others close to completion. The remaining 91 departments will go through one of four major communications companies for the monitoring. So far just four to six agencies have put the program in place, he said.

In the end, all network traffic with flow through 72 sites called Trusted Internet Connections, including eight operated by the four communications companies and 64 operated by individual agencies.

A more sophisticated system known as Einstein 3, which will detect and automatically block intrusions, has just completed testing and will take several years to fully implement, Brown said.

Brown insisted that the government is not lagging behind private industry in its efforts to secure computer networks. He said each agency is responsible for setting up safe cybersecurity practices. Criminals these days "are more targeted, are more professional, and have greater sophistication and capabilities," he said.

  1. Most popular

Einstein will add a valuable safeguard to government agencies but "there still is not a magic bullet" to defeat the increasingly sophisticated threats, said Jerry Dixon, former director at Homeland Security's Computer Emergency Readiness Team.

"We're always playing catch-up or reacting to the last major cyberincident or event but not doing a lot to think about what the future might hold," said Dixon, who is now director of analysis at the Internet security firm Team Cymru.

Complicating the Einstein installation process is that federal agencies have offices and personnel strewn around the globe, from post offices to nuclear labs and national parks. They can be small outposts with a handful of workers or huge complexes employing thousands, and they are operating under many contracts with different Internet vendors.

Baker said legal questions bog down the process. There are concerns that the monitoring programs could violate privacy safeguards for federal workers, members of the public who communicate with them, or other individuals whose e-mail might accidentally get caught in the system.

"The search for legal certainty and legal guarantees may be part of the problem," he said.

U.S. officials and security experts have warned that government networks are persistently scanned and attacked millions of times a day. The recent discovery of the Stuxnet worm, which experts say appeared to target Iranian nuclear plants, stunned and worried U.S. officials, who said it could be modified to wreak havoc on industrial control systems around the world.

Those systems control vital facilities like the electric grid, water plants, traffic systems and industries that produce everything from deadly chemicals to baby formula.

Copyright 2010 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

Video: McConnell: Assange is a ‘high-tech terrorist’

  1. Closed captioning of: McConnell: Assange is a ‘high-tech terrorist’

    >> let me ask you about this wikileaks controversy. how much damage has been done here? what's the real story that you're focused on?

    >> i think the man is a high-tech terrorist. he has done an enormous --

    >> assange?

    >> yes. he has done enormous damage to our country. and i think he needs to be prosecuted to the fullest extent of the law. and if that becomes a problem, we need to change the law. i think it's done enormous damage to our country and to our relationships with our allies around the world.

    >> is there a question of incompetence here on the obama administration in your mind about how this happened?

    >> well, i'm sure that they're going to pursue the way it happened internally as well. i hear that they know who did it. that individual also should be prosecuted to the fullest extent of the law and they need to be looking at how to avoid this in the future.

    >> secretary of state clinton has said part of the problem after 9/11, more emphasis on information sharing . the pentagon has more access to these cables and ultimately that's where private manning, who is accused of doing this, got that information. is information sharing the problem, the ability to download information in the government?

    >> i don't know. but we sure need to look at it thoroughly. because this is a huge problem.


Discussion comments


Most active discussions

  1. votes comments
  2. votes comments
  3. votes comments
  4. votes comments