Through a glass dimly: Australia's new cyber security policy

from apperspective.net: Australian Prime Minister Julia Gillard has announced that $1.46 billion has been set aside by the Australian federal government to strengthen cyber networks as part of a National Security Strategy (PDF).

The funding ,which will be spread out to the year 2020, is designed to strengthen what Gillard described as Australia’s “most sensitive” networks.

In addition, a new Australian Cyber Security Centre will be established by the end of 2013 which will combine existing cyber security capabilities across the Attorney-General’s Department, Defence, Australian Security Intelligence Organisation (ASIO), the Australian Federal Police (AFP) and the Australian Crime Commission in one location.

According to Gillard, the centre will provide Australia with an expanded and more agile response capability to deal with all cyber issues, be they related to government, industry, crime or security.

“Importantly it will also create a hub for greater collaboration with the private sector, state and territory governments and international partners to combat the full breadth of cyber threats,” she said during a speech delivered in Canberra.

“Malicious cyber activity will likely be with us for many decades to come, so we must be prepared for a long, persistent fight.”

Gillard also announced that she has established the Office of the Cyber Policy Coordinator to provide leadership and coordination.

“For the public sector, we must ensure that our most important networks are some of the hardest to compromise in the world,” she said.

“But government alone cannot develop a secure and safe digital environment.”

Gillard added that the federal government must continue to work closely with the information security industry and international partners to develop a set of “global norms” for online behaviour.

“The Internet must remain open but also be secure.”

Related: 

Spy agency ASIO wants powers to hack into personal computers

Cyber War: A one-sided battle against a trumpeted up enemy

Spy agency ASIO wants powers to hack into personal computers

from heraldsun.com.au: Spy agency ASIO wants to hack into Australians' personal computers and commandeer their smartphones to transmit viruses to terrorists.

The Attorney-General's Department is pushing for new powers for the Australian Security Intelligence Organisation to hijack the computers of suspected terrorists.

But privacy groups are attacking the ''police state'' plan as ''extraordinarily broad and intrusive''.

A spokesman for the Attorney-General's Department said it was proposing that ASIO be authorised to ''use a third party computer for the specific purpose of gaining access to a target computer''.

''The purpose of this power is to allow ASIO to access the computer of suspected terrorists and other security interests,'' he told News Limited.

''(It would be used) in extremely limited circumstances and only when explicitly approved by the Attorney-General through a warrant.

''Importantly, the warrant would not authorise ASIO to obtain intelligence material from the third party computer.''

The Attorney-General's Department refused to explain yesterday how third-party computers would be used, ''as this may divulge operationally sensitive information and methods used by ASIO in sensitive national security investigations.''

But cyber specialist Andrew Pam, a board member of the Electronic Frontiers lobby group, predicted ASIO could copy the tactics of criminal hackers to seize control of target computers.

Australians' personal computers might be used to send a malicious email with a virus attached, or to load ''malware'' onto a website frequently visited by the target.


''This stuff goes on already in the commercial and criminal world, and security agencies could be using the same techniques to commandeer people's computers and use them to monitor a target,'' Mr Pam said.

''Once you get control of a computer and connect to their network you can do whatever you want.''

The ASIO Act now bans spies from doing anything that ''adds, deletes or alters data or interferes with, interrupts or obstructs the lawful use of the target computer by other persons''.

But ASIO wants the ban lifted, so Attorney-General Nicola Roxon can issue a warrant for spies to secretly intercept third-party computers to disrupt their target.

The departmental spokesman said the federal government had made ''no decisions'' about whether to grant ASIO the new power.

The government would first consider advice from the federal Parliamentary Joint Committee on Intelligence and Security, which is reviewing national security legislation.

Victoria's acting Privacy Commissioner, Dr Anthony Bendall, has told the committee that ASIO's proposed new powers are ''characteristic of a police state.''

''To access a third party's computer, which has no connection with the target, is extraordinarily broad and intrusive,'' his submission states.

But the Attorney-General's Department insists that ASIO will not examine the content of third-party computers.

''The use of the third party computer is essentially like using a third party premises to gain access to the premises to be searched, where direct access is not possible,'' it states in response to questions from the committee.

''It involves no power to search or conduct surveillance on the third party.''

The department said technological advances had made it ''increasingly difficult'' for ASIO to execute search warrants directly on target computers, ''particularly where a person of interest is security conscious.''

Australian Council for Civil Liberties president Terry O'Gorman yesterday said ASIO should have to seek a warrant from an independent judge, rather than a politician.

He warned that ASIO might be able to spy on individuals - including journalists protecting a whistleblower - by tapping into their computers.

''I'm concerned they will access all sorts of information on a computer that has nothing to do with terrorism,'' he said