FCC Chairman Addresses Cybersecurity - Momentum Builds

February 24, 2012

In a speech given on February 22, 2012 at the Bipartisan Policy Center, Federal Communications Commission (FCC) Chairman Julius Genachowski announced the cybersecurity recommendations of the Communications Security Reliability and Interoperability Council (CSRIC).   CSRIC is a multi-stakeholder working group whose mission is to provide recommendations to the FCC to ensure, among other things, optimal security and reliability of communications systems, including telecommunications, media and public safety.  In March 2011, Chairman Genachowski asked CSRIC to recommend how to best address private sector internet security vulnerability.  He announced those recommendations in his remarks. 

CSRIC recommends that Internet Service Providers (ISPs) take three steps to increase cybersecurity:  (1) develop and adopt an industry-wide code of conduct to combat the botnet threat and protect the public; (2) adopt secure routing standards to stop internet route hijacking; and (3) implement the Internet Engineering Task Force's Domain Name System Security Extensions (DNSSEC) to prevent domain name fraud. 

These recommendations focus on what the private sector can do to advance the nation's preparedness for cyber attacks.  It will further discussions in Congress and in the Administration about how best to respond to increasing cybersecurity threats.  Momentum is building for some solution, whether targeted or comprehensive, and a way to create incentives for free information sharing across and among the private and public sectors.

First, CSRIC recommends ISPs help consumers protect their private computers from botnets.  A botnet is a robot network created by cyber criminals to distribute malware.  A PC or server can become infected with malware when a user unwittingly opens an bad email, link, or file, which then installs malicious software on the machine so that it can be controlled remotely.  These "zombie PCs" are then used to launch cyber attacks.  To prevent botnet attacks, CSRIC recommends that ISPs engage in consumer education.  ISPs can play a significant role in preventing these types of attacks by increasing consumer awareness of signs that computers are being used as bots, detecting infections, notifying users about infections and offering remediation support in a way that does not compromise consumers' privacy.  Chairman Genachowski called on ISPs to develop and adopt an industry-wide code of conduct to combat the botnet threat and protect the public. 

Second, CSRIC recommends that ISPs do more to prevent internet route hijacking.  Connectivity between networks serves as the basis of the internet's architecture.  The method by which individual networks are connected, known as border-gateway protocol, does not include mechanisms to protect against cyber attacks.  Cyber criminals can misdirect internet traffic meant for one destination onto a bad network, and then that network can steal or change the data as it passes through the bad network.  CSRIC recommends that network operators adopt secure routing standards to stop internet route hijacking.  Chairman Genachowski urged ISPs to support the development of these secure routing standards.  He suggested that they could minimize the cost of implementing these standards through advanced planning and implementation during the course of regularly-scheduled maintenance. 

Third, CSRIC recommends that ISPs do more to prevent domain name fraud.  The domain name system (DNS) is the digital phonebook for the web.  DNS has vulnerabilities that can allow identifying information to be changed, letting cyber criminals direct unknowing users to fraudulent websites.  Users often are unaware they are not dealing with a legitimate site and provide operators with financial and personal information.  The Internet Engineering Task Force has developed a series of security extensions to DNS called DNSSEC which can prevent domain name fraud.  CSRIC believes that DNSSEC can be implemented in a way that protects privacy and the openness of the internet.  It recommends that ISPs implement DNSSEC because doing so will provide tangible benefit to the businesses and users who rely on DNS. 

*          *          *

Momentum is building in Congress and in the Administration for action on cybersecurity.  A flurry of proposed legislation has hit Congress in the last few weeks and hearings are being held.  Though there is not yet consensus on what legislation will look like-comprehensive or targeted-there are many moving parts and industries that could be affected. 

Read Time: 4 min
Jump to top of page

Wiley Rein LLP Cookie Preference Center

Your Privacy

When you visit our website, we use cookies on your browser to collect information. The information collected might relate to you, your preferences, or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. For more information about how we use Cookies, please see our Privacy Policy.

Strictly Necessary Cookies

Always Active

Necessary cookies enable core functionality such as security, network management, and accessibility. These cookies may only be disabled by changing your browser settings, but this may affect how the website functions.

Functional Cookies

Always Active

Some functions of the site require remembering user choices, for example your cookie preference, or keyword search highlighting. These do not store any personal information.

Form Submissions

Always Active

When submitting your data, for example on a contact form or event registration, a cookie might be used to monitor the state of your submission across pages.

Performance Cookies

Performance cookies help us improve our website by collecting and reporting information on its usage. We access and process information from these cookies at an aggregate level.

Powered by Firmseek