Feeds

NSA: Secret 'Perfect Citizen' project does not spy on US

Merely 'provides technological solutions'

The essential guide to IT transformation

The US National Security Agency (NSA), the world's premier codebreaking and eavesdropping organisation, has strongly denied that it is setting up monitoring equipment on American privately-owned networks deemed to be critical national infrastructure.

A story in yesterday's Wall Street Journal, which we reported on here, said that defence contractor Raytheon was working on a classified technology project dubbed "Perfect Citizen" for the NSA, which would see infrastructure networks - for instance power, telecoms or transport systems - "instrumented" in order to detect possible attempts to attack them.

This naturally raised some worries in a domestic-surveillance context, with an internal Raytheon email quoted by the WSJ as stating that "Perfect Citizen is Big Brother". Naturally, a lot of information residing in infrastructure systems would be a bonanza for those interested in massive automated monitoring of the US population.

We contacted both the NSA and Raytheon for comment. Raytheon was unable to say anything, but NSA spokesperson Judith Emmel answered by email. It appears that Perfect Citizen does exist, but according to the NSA it is not as menacing as the WSJ report made it seem.

"PERFECT CITIZEN is purely a vulnerabilities-assessment and capabilities-development contract," wrote Emmel. "This is a research and engineering effort. There is no monitoring activity involved, and no sensors are employed in this endeavor. Specifically, it does not involve the monitoring of communications or the placement of sensors on utility company systems."

According to Emmel, the PERFECT CITIZEN tech will merely "provide a set of technical solutions that help the National Security Agency better understand the threats".

As for seeking to spy on US citizens by means of examining their power or phone usage, tracking them through transport systems etc, the NSA would simply never think of such a thing.

"Any suggestions that there are illegal or invasive domestic activities associated with this contracted effort are simply not true. We strictly adhere to both the spirit and the letter of US laws and regulations," insisted Emmel.

Which reads rather as though the NSA is not yet actually "instrumenting" any utility companies, but is developing the necessary tools to do so if required.

The agency would contend that this is purely in order to safeguard vital computer systems in charge of critical things such as power grids, railway signals, traffic lights etc. Many such systems were designed in the days before widespread networks with little thought for security, but are nowadays accessible via the internet.

Without some local access, it would be hard for the NSA even to know what probes into such systems may be underway: packets might reach a given portal by any route across the wider internet. The agency does have a legitimate interest here, being part of the US military and thus expected to defend American networks from enemies both foreign and domestic.

Unfortunately such local access to utility networks would seem to offer scope for disturbing "mission creep" once in place.

And people are bound to ask just why it was thought necessary to keep PERFECT CITIZEN secret. We've asked the NSA's Emmel, in fact: we'll let you know as and when we hear back. ®

5 things you didn’t know about cloud backup

More from The Register

next story
Munich considers dumping Linux for ... GULP ... Windows!
Give a penguinista a hug, the Outlook's not good for open source's poster child
UK fuzz want PINCODES on ALL mobile phones
Met Police calls for mandatory passwords on all new mobes
e-Borders fiasco: Brits stung for £224m after US IT giant sues UK govt
Defeat to Raytheon branded 'catastrophic result'
EU justice chief blasts Google on 'right to be forgotten'
Don't pretend it's a freedom of speech issue – interim commish
Detroit losing MILLIONS because it buys CHEAP BATTERIES – report
Man at hardware store was right: name brands DO last longer
Snowden on NSA's MonsterMind TERROR: It may trigger cyberwar
Plus: Syria's internet going down? That was a US cock-up
UK government accused of hiding TRUTH about Universal Credit fiasco
'Reset rating keeps secrets on one-dole-to-rule-them-all plan', say MPs
Caught red-handed: UK cops, PCSOs, specials behaving badly… on social media
No Mr Fuzz, don't ask a crime victim to be your pal on Facebook
Yes, but what are your plans if a DRAGON attacks?
Local UK gov outs most ridiculous FoI requests...
This'll end well: US govt says car-to-car jibber-jabber will SAVE lives
Department of Transportation starts cogs turning for another wireless comms standard
prev story

Whitepapers

5 things you didn’t know about cloud backup
IT departments are embracing cloud backup, but there’s a lot you need to know before choosing a service provider. Learn all the critical things you need to know.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.
Rethinking backup and recovery in the modern data center
Combining intelligence, operational analytics, and automation to enable efficient, data-driven IT organizations using the HP ABR approach.
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.