Internet security crucial to homeland security

By Jennifer Emmons

El Defensor Chieftain

jatkinson@dchieftain.com

   A New Mexico Tech student Monday presented the Socorro City Council with an Internet security program that is being developed at the university, a program which is being implemented by organizations throughout the country.

   Srinivas Mukkamala, who is working on his doctorate in computer science, gave a presentation on different methods of securing Internet systems and networks. Mukkamala said, under the Homeland Security Bill, 36 centers were designated to address Internet security and assure safety of information passed through cyberspace.

   "New Mexico Tech is in the forefront of developing Internet security programs -- the program at Tech is one of the leading programs being used in the country," Mayor Ravi Bhasker said. "This is a very important piece of information that addresses homeland security and secures the network grid."

   Mukkamala reiterated that Tech is one of the premier centers for Internet security programs.

   "Information operations that protect and defend information systems do so by ensuring their availability, integrity, confidentiality and accountability, which entails ensuring authentication of information and non-repudiation," Mukkamala said.

   This includes providing the restoration of information systems by incorporating protection (or encryption), detection systems and reaction, which means cutting systems off, he said.

   "The financial stakes are high if an intruder invades a network system -- there is a definite need for Internet security," Mukkamala said. "Incidents reports (of computer hackers) have risen dramatically from 1988 to 2002. But as security threats are increasing, so is awareness."

   Because of heightened awareness, people have begun to challenge these threats, for example, Tech has a high-level program that addresses specific and all Internet hacker issues.

   "The knowledge a hacker has to disrupt systems is decreasing," he said.

   Mukkamala described two types of computer hacking: sniffing, which is when someone intercepts computer communication transmission -- the hacker acts as a spy -- and spoofing is when someone tries to act on the behalf of someone else, like identity theft and forging passwords.

   "It's time for everyone to act," Mukkamala said. "Increasing numbers of cyber incidents means sophistication, severity and costs as more people are becoming dependent on cyberspace. So since more people are using the Internet, there is more of a need for protection."

   Different security breaches create vulnerabilities and high costs. Threats of Internet intruders are a national threat and seep into all aspects of American life, he said.

   The problem includes computer crimes, non-state actors (or terrorists) and political activists.

   Various types of security threats can occur within a system with internal abuse, sabotages, fraud and viruses.

   Most computer attacks, he said, originate domestically and most computer network systems are vulnerable.

   "There are a number of human errors that perpetuates corruption, including failure to upgrade, which creates vulnerability for an attacker, ignorance, workload issues, not following procedures and incorrect access," he continued.

   Other human errors that create network problems include inadequate resources, efforts to bypass security policy, talking about issues outside the company or organization and time pressure.

   Steps that can be taken to reduce human error, he said, could include defining security policies, increase staffing, more individual accountability, automating system functions and training, both initial and on-going.

   "Training is key to preventing network and system intruders," Mukkamala said.

   He clarified to the council that viruses are corruptions that spread across files; worms spread across networt computers as self-standing programs.

   "We've done studies in Socorro on networks and we have geographical locations in Socorro where computers are most vulnerable," he said.

   "Critical infrastructures can be affected by cyberspace attacks include governments, transportation, the gas and oil industry, weapons, the military and the list goes on and on," he said.

   The federal government is beefing up efforts to avoid cyber attacks by raising awareness, raising the number of skilled personnel, sharing information about vulnerabilities and fostering partnerships with private organizations.

   Bhasker said the city operates from a UNIX system, which is accesses through a served and each employee has a pass code.

   "How would you offer service to the city to critique and check our system vulnerabilities?" Bhasker asked Mukkamala.

   Mukkamala said Tech does not provide the service of checking individual systems for companies or organizations, but he advised that all employees and users of the system close all ports when finished with using the computer.

   "You need to make sure everything on the network is locked so no on can get in -- just like you'd secure your house," Mukkamala said.

   Bhasker said Internet dependency and security is a new frontier and education is the answer.

   In related business to homeland security issues, Dave Finley, public information officer for the National Radio Astronomy Observatory, announced that the Socorro Amateur Radio Association will be hosting its annual Field Day event.

   The Field Day begins at noon Saturday, June 28, and goes for 24-hours, until noon Sunday, June 29, at Clarke Field.

   The public is invited to see amateur radio at work, Finley said.

   "Every year, we gather to simulate a disaster -- amateur radio is widely used as a backup communications system," Finley said.

   The Field Day is a 24-hour exercise wherein amateur radio operators contact nearly 100 other amateur radio associations and can contact more people in nearly every state.

   Finley said the entire Western Hemisphere is open to amateur radio communications.

   During the Field Day, the operators will be using both voice communications and Morse code.

   The event has been held in Socorro for about 20 years, Finely said, but amateur radio has been active since the early 20th century.

   "With all the homeland security that's being addressed, we're really lucky to have this in Socorro," Bhasker said.

   Finley said, as part of the association's charter, the organization can be used as a main source of communication in times of need. For example, during the Sept. 11, 2001, terrorist attacks, amateur radio was widely utilized.

   "We're running, we're active and we're prepared," Finley said. "Amateur radio is a backup system that is ready to be used within the city and surrounding areas."