Feeds

NSA: Secret 'Perfect Citizen' project does not spy on US

Merely 'provides technological solutions'

5 things you didn’t know about cloud backup

The US National Security Agency (NSA), the world's premier codebreaking and eavesdropping organisation, has strongly denied that it is setting up monitoring equipment on American privately-owned networks deemed to be critical national infrastructure.

A story in yesterday's Wall Street Journal, which we reported on here, said that defence contractor Raytheon was working on a classified technology project dubbed "Perfect Citizen" for the NSA, which would see infrastructure networks - for instance power, telecoms or transport systems - "instrumented" in order to detect possible attempts to attack them.

This naturally raised some worries in a domestic-surveillance context, with an internal Raytheon email quoted by the WSJ as stating that "Perfect Citizen is Big Brother". Naturally, a lot of information residing in infrastructure systems would be a bonanza for those interested in massive automated monitoring of the US population.

We contacted both the NSA and Raytheon for comment. Raytheon was unable to say anything, but NSA spokesperson Judith Emmel answered by email. It appears that Perfect Citizen does exist, but according to the NSA it is not as menacing as the WSJ report made it seem.

"PERFECT CITIZEN is purely a vulnerabilities-assessment and capabilities-development contract," wrote Emmel. "This is a research and engineering effort. There is no monitoring activity involved, and no sensors are employed in this endeavor. Specifically, it does not involve the monitoring of communications or the placement of sensors on utility company systems."

According to Emmel, the PERFECT CITIZEN tech will merely "provide a set of technical solutions that help the National Security Agency better understand the threats".

As for seeking to spy on US citizens by means of examining their power or phone usage, tracking them through transport systems etc, the NSA would simply never think of such a thing.

"Any suggestions that there are illegal or invasive domestic activities associated with this contracted effort are simply not true. We strictly adhere to both the spirit and the letter of US laws and regulations," insisted Emmel.

Which reads rather as though the NSA is not yet actually "instrumenting" any utility companies, but is developing the necessary tools to do so if required.

The agency would contend that this is purely in order to safeguard vital computer systems in charge of critical things such as power grids, railway signals, traffic lights etc. Many such systems were designed in the days before widespread networks with little thought for security, but are nowadays accessible via the internet.

Without some local access, it would be hard for the NSA even to know what probes into such systems may be underway: packets might reach a given portal by any route across the wider internet. The agency does have a legitimate interest here, being part of the US military and thus expected to defend American networks from enemies both foreign and domestic.

Unfortunately such local access to utility networks would seem to offer scope for disturbing "mission creep" once in place.

And people are bound to ask just why it was thought necessary to keep PERFECT CITIZEN secret. We've asked the NSA's Emmel, in fact: we'll let you know as and when we hear back. ®

The essential guide to IT transformation

More from The Register

next story
GCHQ protesters stick it to British spooks ... by drinking urine
Activists told NOT to snap pics of staff at the concrete doughnut
Britain's housing crisis: What are we going to do about it?
Rent control: Better than bombs at destroying housing
What do you mean, I have to POST a PHYSICAL CHEQUE to get my gun licence?
Stop bitching about firearms fees - we need computerisation
Top beak: UK privacy law may be reconsidered because of social media
Rise of Twitter etc creates 'enormous challenges'
Redmond resists order to hand over overseas email
Court wanted peek as related to US investigation
Ex US cybersecurity czar guilty in child sex abuse website case
Health and Human Services IT security chief headed online to share vile images
NZ Justice Minister scalped as hacker leaks emails
Grab your popcorn: Subterfuge and slur disrupts election run up
prev story

Whitepapers

Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Advanced data protection for your virtualized environments
Find a natural fit for optimizing protection for the often resource-constrained data protection process found in virtual environments.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.