战略与国际研究中心-Telecommunications-Working-Group-Final-Report_23页_410kb

CSIS - Cyber Security for the 44th Presidency: Telecommunications Task Group Final Report Summary

1. Core Content

This report from the Center for Strategic and International Studies (CSIS) focuses on the cyber security of the United States' telecommunications infrastructure, emphasizing its critical role in supporting all other national infrastructures. The report outlines the current state of the telecommunications environment, legal and regulatory challenges, future technological trends, and the need for enhanced cyber security measures.

2. Main Points

a. Telecommunications Infrastructure Overview

• The telecommunications infrastructure is now highly complex and integrated with the Internet, with all services supported via the Internet Protocol (IP).
• Major carriers like AT&T, Verizon, and others operate large Autonomous Systems (AS) connected through private peering relationships.
• The Border Gateway Protocol (BGP) is central to routing traffic between AS, and the Domain Name System (DNS) is crucial for IP packet addressing.
• The infrastructure includes three main layers: Services, IP Core, and Optical, with increasing reliance on IP-based technologies like VoIP, IMS, and MPLS.

b. Legal and Regulatory Considerations

• The legal framework for telecommunications is evolving to keep pace with technological convergence.
• Issues like Customer Proprietary Network Information (CPNI) have led to stricter security regulations.
• Net neutrality concerns have emerged, with fears that unequal treatment of traffic could create security risks.
• Law enforcement access to data is constrained by privacy laws, such as the PATRIOT Act and CALEA, which have been criticized for not keeping up with modern technologies.

c. Future Drivers and Influences

• The demand for bandwidth is growing rapidly due to multimedia and mobile applications.
• Carriers are transitioning to fully-meshed optical architectures and intelligent traffic management systems.
• The adoption of IPv6 is expected to increase as the infrastructure supports both IPv4 and IPv6 transparently.
• IMS (IP Multimedia Subsystem) is being implemented to better handle mobile and multimedia services.

d. Interdependencies

• Critical infrastructures such as IT systems, energy, transportation, and public safety rely heavily on the telecommunications infrastructure.
• Conversely, the telecommunications infrastructure depends on electrical power, transportation, and human resources for maintenance and operation.

3. Existing Cyber Security Mechanisms

• Major carriers have implemented network separation and traffic monitoring to detect and respond to attacks.
• Managed security services are available for enterprise customers, including threat detection, intrusion prevention, and spam blocking.
• However, limited information sharing between carriers and government agencies persists due to legal and privacy constraints.

4. Cyber Security Challenges and Recommendations

a. National Early Warning and Response Capability

• There is a lack of a comprehensive national cyber attack early warning and response system.
• Current mechanisms like ISACs and EINSTEIN focus on post-attack analysis rather than real-time detection.
• A quasi-public corporation is proposed as a model to serve as a clearing house for cyber attack information and response coordination.

b. Legal and Policy Reforms

• The report suggests modifications to the Electronic Communications Privacy Act (ECPA) and Telecommunications Act (1996) to improve information sharing and privacy protections.
• It emphasizes the need for legislative action to enable real-time exchange of cyber attack data across the sector.

5. Key Recommendations

• Establish a national cyber early warning and response system.
• Create a quasi-public corporation to centralize information sharing and coordination.
• Enhance cyber security regulations to address new attack vectors and ensure the protection of customer data.
• Improve interoperability and transparency between the public and private sectors in the face of evolving threats.

6. Conclusion

The report highlights the critical role of telecommunications in national security and the urgent need for improved cyber security measures. It underscores the importance of a unified, real-time approach to detecting and responding to cyber threats, as well as the necessity of regulatory and legal reforms to support this. The proposed quasi-public corporation model is seen as a viable solution to address these challenges.