Internet/network security

From The Internet: Issues at the Frontier (course wiki)
Jump to navigation Jump to search

Jgruensp (fun topics, all: we could invite the CSIS commission which has been grappling with all these issues and is desperate for legal guidance)

Internet Dependency (What if someone somehow takes down the net?)

Dan Ray (maybe)

We have come to rely on the Internet for almost every aspect of our lives. If the Internet somehow suddenly went "down" (through either a cyberattack or physical attack on key backbone pieces of infrastructure), the result would likely be calamity, as well as hordes of people who wouldn't know what to do with themselves. Can we even imagine what the world would look like the morning after such an attack if it was successful? Are we wrong to rely so heavily on a single tool whose detailed technical inner workings so few people truly understand? Are we setting ourselves up to be ruined when someone compromises this tool? What about the tradeoffs between keeping the Net free+open vs. regulation to ensure that it retains its functional integrity in the face of attack?

We can invite Dan Kaminsky, who recently discovered a flaw in the inner-workings of the Net that could have caused some serious damage. See, e.g., http://www.nytimes.com/2008/08/09/technology/09flaw.html?hp (or we could invite will smith, who defeated the aliens in independence day with the help of cyber-attack).

  • I vote Will Smith. Unless everyone wants to get into the desirability of a DNS nonce of sufficient bitlength, in which case... no, still Will Smith. That guy's an elliptic curve cryptography fiend. However, if we do want to talk about design issues in the internet, and the failure of the marketplace to handle externalities created by poor software design, leading to the perpetual crisis of bugginess, we could do worse than to invite Daniel Bernstein. Plus, as an added bonus, he saw the issues that gave rise to the Kaminsky bug coming down the pike a long time ago. --Jgruensp

Internet as International Conflict Zone

Dan Ray (maybe)

In light of the recent events in Estonia, have we finally reached the long-predicted era of cyberwarfare? Is cyber-espionage a counterintelligence problem or something more? (This article from the National Journal talks bluntly about perceived threats, although is perhaps a little too willing to attribute causation of certain events to Chinese actors on dubious evidence)

Internet as an Extension of National Infrastructure

Dan Ray (maybe)

It is easy to define the borders of the nation in realspace (ports, airports, land crossings), and the tradeoffs between private propertyholders' rights and national security interests (making those tradeoffs? Not always so easy). But what are the national borders in cyberspace? Given the dangers described in the two topics above, what kind of role, if any, should national government play in monitoring and regulating major backbone communications links? What about the networks of semi-public industries such as utilities? Private corporations that store government secrets? Financial systems? Other types of privately owned networks?

--Jgruensp 23:54, 30 November 2008 (EST)