Bookmark and Share
News  

 

Review Urges WH Leadership on Cybersecurity (by Shaun Waterman, Washington Times)
DoD Offers More Details of How Cyber Command Would Work (by Jason Miller, Federal News Radio)
Cybersecurity Review Sets Turf Battle (by Siobhan Gorman, Wall Street Journal)
Cyber Security Review Release Is Imminent (by Marc Ambinder, The Atlantic)
Harman Dealing with Ongoing Controversy (by Gene Maddaus, Torrance CA Daily Breeze)
The Real Jane Harman Scandal (by David Frum, American Enterprise Institute)
State of Play in the Harman Case (by Laura Rozen, Foreign Policy)
U.S. Steps Up Effort on Digital Defenses (by David E. Sanger, New York Times)
U.S. Already at War in Cyberspace, Experts Say (by William Jackson, Government Computer News)
The Intelligence Watchdogs Who Tried to Stop the NSA Story (by David Nather, Congressional Quarterly)
LTG Keith Alexander Speech at RSA (National Security Agency)
Melissa Hathaway Speech at RSA (Linked by Marc Ambinder, The Atlantic) (Word Document)
 
Overview  

Part of the American Intelligence Community, the National Security Agency (NSA) has long been one of the federal government’s most secretive spy operations. Created during the Cold War, NSA spent its first four decades trying to intercept the communications of Soviet spies, officials and allies in an attempt to learn of their plans and operations. This work required agency officials to develop sophisticated eavesdropping technology that could be employed from almost anywhere in the world, from land to sea to space. By the end of the 1990s, however, NSA was struggling to keep up with the Internet and wireless age and still successfully monitor America’s new enemy: terrorists. Attempts to upgrade the agency’s capabilities have not been successful this decade, and its spying on Americans by order of President George W. Bush thrust the NSA into one of the most heated controversies in US politics today.

 
History  
The United States first began to experiment with electronic intelligence gathering during World War I when the US Army created the Cipher Bureau (MI-8) within the Military Intelligence Division (MID) under Herbert Yardley. MID assisted the radio intelligence units in the American Expeditionary Forces and in 1918 created the Radio Intelligence Service for operations along the Mexican border. Yardley’s shop became known as the “Black Chamber” because of its secretive work, which continued after the war ended until 1929 when the Army and State Department terminated the program.
 
The Army continued some of Yardley’s work through the Signal Intelligence Service of the Army Signal Corps under the direction of William F. Friedman. Meanwhile, the Navy established a cryptanalytic function in 1924 in the “Research Desk” under Commander Laurance F. Safford in the Code and Signal Section within the Office of Naval Communications. While emphasis was on the security of American military communications, both the Army and Navy developed radio intercept, radio direction finding and processing capabilities prior to World War II.
 
The US military achieved particular successes against Japanese diplomatic communications during World War II as code breakers managed to decipher Japan’s system. As the war progressed, military leaders realized the value of this intelligence work and gradually devoted more men and resources to these operations. However, the most important achievement in electronic spy warfare came in 1943 in a Bell Telephone laboratory. There, an unnamed engineer was working on one of the US government’s most sensitive teletype machines used by the Army and Navy to transmit wartime communications that could defy German and Japanese cryptanalysis. The engineer inadvertently noticed that in another part of the lab an oscilloscope was registering spikes each time the teletype stamped out an encrypted letter. The discovery meant that teletypes - and all other information processing machines - sent out energy signals that could be captured, thus revealing the information being transmitted, even if coded. This scientific breakthrough had enormous ramifications for electronic spying after the war, although for the time being, the Bell lab discovery was forgotten.
 
Towards the end of WWII, the American military services created a coordinating body to facilitate communications intelligence (COMINT) cooperation - the Army-Navy Communications Intelligence Board (ANCIB). In late 1945, the State Department was added to the board, changing it to the State-Army-Navy Communications Intelligence Board (STANCIB). STANCIB evolved in 1946 into the United States Communications Intelligence Board (USCIB), which added the FBI as a member.
 
In 1947, Congress and President Harry Truman passed the National Security Act of 1947, a landmark piece of legislation that created the Central Intelligence Agency and the National Security Council. The CIA became a member of USCIB, which received a new charter as the highest national COMINT authority in the federal government. In the meantime, the armed services continued to work on their own cryptologic operations, including the newly-established US Air Force. Some military commanders discussed the possibility of merging all military intelligence and communications (COMSEC) efforts to avoid duplication and wasting of resources.
 
In 1949, Secretary of Defense Louis A. Johnson liked the idea of combining COMINT and COMSEC and subsequently ordered the issuance of JCS Directive 2010 which established the Armed Forces Security Agency (AFSA). The new agency was charged with running COMINT and COMSEC operations, excluding only those that were delegated individually to the Army, Navy and Air Force. The JCS directive also established an advisory council within AFSA known as the Armed Forces Security Agency Council (AFSAC). The organization became the mechanism through which AFSA reported to the JCS.
 
This operational structure had its problems, however, as military and civilian leaders realized that having AFSA report through the Joint Chiefs encumbered the new agency’s duties. On December 13, 1951, President Truman selected a special committee, the Brownell Committee, to study the problem and come up with a solution. The conclusion was that the communications intelligence body should have more than a military chain-of-command structure. On October 24, 1952 President Truman signed a secret memo that transformed AFSA into the National Security Agency (NSA) and removed the JCS as the authority over it. Instead, NSA’s director reported to the Secretary of Defense, who served on a special committee of the National Security Council that included the Secretary of State and the Director of Central Intelligence.
 
The CIA told officials at the new NSA that they had been playing with the Bell teletype machines and found they could pick up the invisible signals given off from a quarter mile away. This led NSA researchers to begin studying “compromising emanations” as part of the ultra-secret Tempest program to find ways of intercepting Soviet communications.
 
In 1972, NSA was given the added authority over all cryptology efforts employed by the armed services. As a result, the agency’s name was officially enlarged to the National Security Agency/Central Security Service (NSA/CSS), however most government officials continued to refer to the agency as simply NSA.
 
From the 1950s onward, NSA helped develop advanced communications technology that could steal communications from off-shore (on listening ships) or high above in the atmosphere (using spy satellites). As the means for accumulating information grew, NSA needed greater capacity for storing and analyzing secret data. This led NSA researchers to conduct pioneering work that led to the development of the first supercomputers. NSA experts also became skilled cyber warriors as the Internet age unfolded with the forming of elite teams of computer hackers capable of testing any corporate or government web site’s firewall protections.
 
Despite its many successes on the high-tech frontier, NSA found itself by the turn of the 21st century falling behind the technology curve. In 1999, Air Force General Michael Hayden took command of NSA and set out to modernize the agency’s technological capabilities. Hayden implemented a modernization program called Trailblazer designed to upgrade NSA computer systems and other equipment and improve the agency’s ability to intercept and sort cell phone, email and other communications. Trailblazer, however, experienced cost overruns and other problems (see Controversies). NSA also became mired in one of the biggest scandals of the Bush administration when it was revealed that the White House had ordered the agency to conduct domestic eavesdropping without warrants or authorization from Congress.
 

Inside NSA Red Team Secret Ops With Government's Top Hackers

(by Glenn Derene, Wired)

What it Does  
The National Security Agency/Central Security Service (NSA) specializes in cryptology, the science of coding and decoding information. NSA conducts highly specialized intelligence gathering activities to locate threats to US government information systems and other American vital interests. A high technology organization, NSA develops cutting-edge communications and data processing capability and performs foreign language analysis and research.
 
Most NSA/CSS employees, both civilian and military, are headquartered at Fort Meade, Maryland, and perform work as analysts, engineers, physicists, mathematicians, linguists, computer scientists, researchers, security officers and data flow experts. NSA employs the country’s premier cryptologists, many of whom are mathematicians. In fact, NSA is the largest employer of mathematicians in the United States. These number crunchers design cipher systems to protect US information systems from being compromised and search for weaknesses in the systems and codes of American enemies.
 
NSA’s work is divided into two main divisions: Signals Intelligence (SIGINT) and Information Assurance (IA). SIGINT uses sophisticated eavesdropping technology to spy on foreign powers, organizations or persons and international terrorists. Information gathered by SIGINT is delivered to military leaders and policy makers
 
IA detects and responds to cyber threats; makes encryption codes to securely pass information between systems; and embeds IA measures directly into the emerging Global Information Grid. It includes building secure audio and video communications equipment, making tamper protection products and providing trusted microelectronics solutions. It tests the security of IT systems of government agencies and other partners and evaluates commercial software and hardware against nationally set standards.
 
IA also includes the National Information Assurance Research Laboratory, the federal government’s premier information assurance research and design center. The lab's extensive in-house research program covers cryptographic algorithms, photonics, operating systems like SELinux and advanced intrusion detection tools.
 
NSA runs the National Cryptologic School, one of six Cryptologic Training Schools within the United States Cryptologic System (USCS). The school consists of three teaching departments that offer instruction in Cryptology, Information Assurance, Language and Leadership.
 
Although its operations are top secret, NSA does provide some information for public consumption, including press releases, congressional testimony, special reports, and declassification initiatives.
 

The Evolution of Intrusion Detection Systems

(by Paul Innella, SecurityFocus)

Where Does the Money Go  
Until this decade, NSA officials relied almost exclusively on its in-house experts to develop new technology that the agency required. But under the leadership of Director Michael Hayden, the NSA for the first time began handing out multimillion dollar contracts to companies to acquire high-tech equipment and services.
 
One of the largest initiatives launched by Hayden was Trailblazer, a multi-company program designed to upgrade NSA’s ability to intercept cell phone calls, emails and other electronic communications. Initially, the agency awarded three prime contracts in 2001 for concept studies that would define the shape and cost of Trailblazer. The prime contracts were awarded to Booz Allen & Hamilton, Lockheed Martin and TRW, which were expected to hire more than 30 subcontractors to complete the work. The value of the contracts was not released.
 
NSA decided in 2002 to make Science Applications International Corporation (SAIC) the main contractor on the project, awarding a $280 million contract to a team of businesses led by SAIC for development of the Technology Demonstration Platform (TDP) project in support of Trailblazer. Other companies on SAIC’s team included Boeing, Booz Allen Hamilton, Computer Sciences Corp. and Northrop Grumman.
 
Conquest, Inc., which first was given a five-year, $57 million contract to provide systems engineering and support to help NSA modernize its signals intelligence computer programs, was later awarded another deal worth $140 million for work on Trailblazer.
 
In addition to Trailblazer, almost 40 companies received contracts to support NSA’s Groundbreaker initiative to improve the agency’s IT infrastructure, with Computer Sciences Corporation being the biggest winner with a 10-year deal worth $5 billion.
 
In 2007, NSA was awarded contracts to General Dynamics and L-3 Communications for delivery of mobile, handheld devices intended for unclassified and classified voice and data traffic as part of the Secure Mobile Environment Portable Electronic Device (SME PED) program. General Dynamics received $300 million over five years. Financial details were not provided for L-3 Communications.
 
Raba Technologies landed two $100 million contracts with NSA, one of which was for engineering and software services. The company specializes in systems integration and software development and counts Sun Microsystems and the Pentagon among its customers.
 
NSA awards $140 million systems contract (by Dawn S. Onley, Government Computer News)
CSC, NSA get down to business (by George I. Seffers, Federal Computer Week)
NSA to award contracts for secure mobile devices by month's end (by Sebastian Sprenger, Federal Computer Week)
Raba secures second $100M NSA contract (by Robert J. Terry, Baltimore Business Journal)
Controversies  
Trailblazer Burning Up the Dollars
The National Security Agency’s seven-year effort to upgrade its eavesdropping capabilities had done little more than eat up more than a billion dollars in costs by 2006. Launched by former NSA Director Michael Hayden in 1999, Trailblazer was an ambitious effort to design new analytical tools that could sift through enormous amounts of data collected from cell phones, pagers, text messages and emails to locate potential threats against the US. Even before the intelligence failure that helped allow the Sept. 11 attacks to take place, NSA officials knew they were at risk of becoming overwhelmed by the new era of wireless communication that produces millions of bits of data captured each day by NSA listening technology. The problem wasn’t gaining access to communications, but how to go through it quickly and efficiently to find tips of a terrorist’s plans.
 
But after years of dispensing hundreds of millions of dollars to technology and defense contractors, NSA had little to show for its spending. A 2003 audit by the NSA’s Inspector General found “inadequate management and oversight” of private contractors and overpayment for the work that had been done.
 
In 2005, Hayden testified before Congress, saying of Trailblazer, “The cost was greater than anticipated in the tune, I would say, in hundreds of millions….When we actually encountered doing this, it was just far more difficult than anyone anticipated.”
 
The problems with Trailblazer were compounded by difficulties with another NSA program, Groundbreaker, a $2 billion effort to modernize and outsource the agency’s electronics infrastructure, including computers, software and networks. A Computer Services Corp. (CSC)-led team in 2001 won the Groundbreaker contract. As part of the contract, about 1,000 NSA employees became employees of CSC or one of its subcontractors.
 
Despite the problems, NSA was unlikely to pull the plug on Trailblazer due to the agency’s necessity to solve its data-combing weakness. “If you kill Trailblazer, you might as well kill NSA,” said James Bamford, a national security author.
 
Defense Contractor Known as “NSA West”
WhenScience Applications International Corporation (SAIC) became the lead contractor for NSA’s Trailblazer project, those who know the agency were not at all surprised. Not only is SAIC one of the biggest government contractors working in Washington, but it also enjoys very close connections to the spy agency.
 
SAIC has hired so many NSA employees that insiders call it “NSA West,” because the company’s base is in San Diego, CA. Among those who have gone through the “revolving door” between the agency and business is William Black, a decorated NSA manager who spent almost 40 years at the agency, retired and became a vice president at SAIC in the late 1990s. The company hired Black “for the sole purpose of soliciting NSA business,” said Matthew Aid, an intelligence historian who is writing a three-volume history of the agency.
 
Then, when NSA Director Michael Hayden took over the agency and wanted to launch Trailblazer, he brought Black back in 2000 to serve as his No. 2. Two years later, SAIC won the Trailblazer contract, and Black was put in charge of managing the program.
 
Almost 90% of SAIC’s revenue comes from the US government, with NSA being the company’s single biggest customer. NSA has paid SAIC more than $1 billion for the Trailblazer project.
 
Scuttled NSA Program Could Have Avoided Wiretapping Controversy
In the late 1990s, the NSA developed a pilot program that would have enabled it to gather and analyze massive amounts of communications data without running afoul of privacy laws. But agency heads dropped the project after 9/11 because of bureaucratic infighting and pressure from the White House to expand the agency’s surveillance powers.
 
The program that NSA rejected, called ThinThread, was developed to handle greater volumes of information, partly in expectation of threats surrounding the millennium celebrations. It was thoroughly tested in 1998 and passed with flying colors, demonstrating an ability to sort through massive amounts of data to find threat-related communications while encrypting US-related communications to ensure privacy.
 
But NSA Director Michael Hayden opted against developing ThinThread. The decision was attributed to “turf protection and empire building.” In the wake of revelations about the agency’s wide gathering of US phone records, some officials contend that ThinThread could have provided a simple solution to privacy concerns.

NSA Watch on NSA Controversies

Debate  
NSA Warrantless Surveillance Controversy
Shortly after the Sept. 11 attacks, President George W. Bush secretly authorized the National Security Agency to begin collecting communications data from sources in touch with US-based individuals. Such domestic eavesdropping is illegal under federal law unless authorized by special warrants from the Foreign Intelligence Surveillance Court. When word of the domestic snooping on Americans became public, President Bush insisted that he had the legal authority to order NSA to intercept phone calls, emails and text messages from those outside the US communicating with others within American borders. Democrats in Congress vehemently disagreed and began their own investigations into the matter.
 
To pursue the program, the Bush administration approached the CEOs of five US phone companies: C. Michael Armstrong of AT & T, Ivan Seidenberg of Verizon, F. Duane Ackerman of BellSouth, Ed Whitacre of SBC and Joseph Nacchio of Qwest.   Of the five, only Nacchio refused to cooperate, stating that he would do so only if the Foreign Intelligence Surveillance Court gave its approval. Nacchio was also the only one of the five to be hit with criminal prosecution…for insider trading. (Although he was originally convicted in 2007 and sentenced to six years in prison, on March 18, 2008, the verdict was thrown out and a retrial ordered.)
 
Background
Bush Lets U.S. Spy on Callers Without Courts (by James Risen and Eric Lichtblau, New York Times)
NSA Wiretapping: The Legal Debate (by Maria Godoy, NPR)
 
Pro:
The most visible spokesmen on behalf of the wiretapping operation were President Bush, Vice President Dick Cheney and former Attorney General Alberto Gonzales. Both Bush and Cheney argued that the highly-classified wiretapping program was crucial to American national security, designed to detect and prevent terrorist attacks against the United States and its allies. They insist that the media behaved improperly by exposing the existence of the program because it allowed terrorists to know of US plans to intercept their dangerous communiqués. “Revealing classified information is illegal, alerts our enemies, and endangers our country,” remarked the President in one of his radio addresses.
 
Vice President Cheney insisted that the war on terror required the US to “use whatever means that are appropriate to try to find out the intentions of the enemy.” He also warned that complacency towards further attacks was dangerous, and that the lack of another major attack since 2001 was due to the tireless efforts of American officials carrying out decisive policies.
            President Bush has argued that the communications that were intercepted by NSA were “foreign intelligence,” not domestic in nature. Furthermore, Congress gave the President implicit authorization to order surveillance without warrants by passing the Authorization for Use of Military Force Against Terrorists (AUMF). Attorney General Gonzales stated that the Bush administration chose not to ask Congress to authorize such wiretaps explicitly because it would have been difficult to get such an amendment without compromising classified information relating to operational details.
 
Con
Democrats, some Republicans and civil liberties groups like the ACLU have expressed outrage at the attempts by the Bush administration to spy on American communications without legal authority. In spite of the events of 9/11, Democrats argued that war is not a blank check for the President to whatever he pleases in the name of national security. The Department of Justice’s legal rationale for the wiretapping represented a manipulation of the law that was “overreaching” and a twisting of interpretations.
 
Democratic Senators Patrick Leahy (VT) and Ted Kennedy (MA) asserted that Attorney General Gonzales was being disingenuous when he said the administration didn’t ask Congress out of fear of exposing classified information. The reality was that Congress simply would have never granted such an extreme act of spying on Americans and others in the US.
 
A group of constitutional scholars and former government officials wrote a letter to Congress outlining their concerns over the administration’s justification for the NSA surveillance program. They insisted that AUMF does not grant, either implicitly or explicitly, the authority that President Bush claims, and they pointed out that under the Foreign Intelligence Surveillance Act, the President was allowed to authorize warrantless wiretaps during the first 15 days of a war.

Democrats.com Wiretapping Page

Suggested Reforms  
Congress Pushes for Contract Reform
Following the revelations of NSA’s billion-dollar attempts to develop new technology by using private contractors, Democrats and Republicans on Capitol Hill attempted in 2003 to limit the agency’s future spending on outside companies. Both the House and Senate adopted language as part of a defense authorization bill that would have taken away NSA’s unregulated power to sign multimillion-dollar deals with contractors and instead give that authority to the Pentagon. NSA would still be able to hire outside firms to perform work, but the deals would be subject to Defense accounting procedures.
 
NSA officials were not happy with the plan, saying the new procedures would make things difficult for the agency. “When you're dealing with information technology, you’ve got to be able to buy stuff very quickly,” said a former senior acquisition executive at NSA. At the Pentagon, the bureaucratic process can take 15 years to develop a new program - time that the NSA doesn’t have. 

 

Congress curbs NSA's power to contract with suppliers: Lawmakers frustrated by bookkeeping problems at the intelligence agency (by Ariel Sabar, Baltimore Sun)

Congressional Oversight  
Former Directors  
Ralph Canine (1952–1956)
John Samford (1956–1960)
Laurence Frost (1960–1962)
Gordon Blake (1962–1965)
Marshall Carter (1965–1969)
Noel Gayler (1969–1972)
Samuel C. Phillips (1972–1973)
Lew Allen (1973–1977)
Bobby Ray Inman (1977–1981)
Lincoln Faurer (1981–1985)
William Odom (1985–1988)
William Studeman (1988–1992)
John M. McConnell (1992–1996)
Kenneth Minihan (1996–1999)
Michael Hayden (1999–2005)

Comments  
Nominations  
Leave a Comment  
Name:
Email:
Message:
Enter the code:
Nominate Official  
Name:
Email:
Message:
Enter the code:
Table of Contents

Founded: 1952
Annual Budget: Classified (GlobalSecurity.org guesstimates the FY 2009 budget to be $15 billion)
Employees: 30,000 (estimated)

National Security Agency/Central Security Service (NSA)
Alexander, Keith
Director
A native of Syracuse, NY, Army Lieutenant General Keith B. Alexander has served as the director of the National Security Agency since August 2005. In this role, Alexander also serves as chief of the Central Security Service (NSA/CSS) and commander of the Joint Functional Component Command - Network Warfare (JFCC-NW) at Fort George G. Meade in Maryland. As the director of NSA and chief of CSS, he is responsible for a Department of Defense agency with national foreign intelligence and combat support responsibilities. As commander of JFCC-NW, he is responsible for planning, executing and managing forces for coordinating DoD computer network defense as directed by US Strategic Command.
 
Alexander holds a Bachelor of Science degree from the US Military Academy and a Master of Science degree in business administration from Boston University. He holds a Master of Science degree in systems technology (electronic warfare) and a Master of Science degree in physics from the Naval Post Graduate School. He also holds a Master of Science degree in national security strategy from the National Defense University.
Alexander’s military education includes the Armor Officer Basic Course, the Military Intelligence Officer Advanced Course, the US Army Command and General Staff College and the National War College.
 
Alexander’s military commands include serving as G-2 for the 1st Armored Division both in Germany and Operations Desert Shield and Desert Storm in Saudi Arabia; S-3 and executive officer for the 522nd MI Battalion, 2nd Armored Division; and as deputy director and operations officer for the Army Intelligence Master Plan for the Deputy Chief of Staff for Intelligence.
 
His command assignments include tours in Germany and the US as commander of the Border Field Office for the 511th MI (Military Intelligence) Battalion in the 66th MI Group; the 336th Army Security Agency Company in the 525th MI Group; the 204th MI Battalion; and the 525th MI Brigade.
 
In 1997-1998, Alexander served as deputy director for intelligence (J2) for the Joint Staff. From 1998 to 2001, he served as director for intelligence (J2) for the United States Central Command. From 2001 to 2003, he held the US Army Intelligence and Security Command and, most recently, he served as deputy chief of staff (G2) for the US Army from 2003 until assuming command of the NSA.
 
Alexander has been described as a “cerebral and personable man who has occasionally clashed with other officials in pursuing projects that they saw as trespassing on their turf.”
 
Eavesdropping Isn't Easy, the Master at It Says (by Scott Shane, New York Times)