ig_update - University of Hawaii

advertisement
InfraGard Update
SSA John V. Gillies
SA Matthew E. Morin
Overview






Role of InfraGard and NIPC
Update on InfraGard Activities
Future Plans for InfraGard
Membership Options
On-line Demonstration of Services
Advisory
National Infrastructure Protection
Center (NIPC) and InfraGard
PDD-63
“As part of a national warning and
information sharing system, the
President authorizes … a full scale
National Infrastructure Protection
Center (NIPC)...”
“This organization shall serve as a
national critical infrastructure threat
assessment, warning, vulnerability,
and law enforcement and response
entity...”
PDD-63 (cont.)
“In addition, it will establish its own
relations directly with others in the
private sector and with any information
and analysis entity that the private sector
may create...”
“All executive departments shall also
share with the NIPC information about
threats and warning of attacks and about
actual attacks on critical government and
private sector infrastructures to the extent
permitted by law...”
Info. Analysis and Warning
Infrastructure
Owners &
Operators
Sector
Lead Agencies
Department of
Defense
Intelligence
Community
h
NIPC
Federal, State, Local
Law Enforcement
Other
Government
Agencies
Warnings
Threats &
Incidents
Mechanism for Receiving and
Disseminating Information
Incident Information
Submitted to NIPC
email
FAX
telephone
Secure Web Server (InfraGard)
NIPC
PROCESSING
Dissemination of NIPC
Warning Products
Classified
-Autodin
-STU-3
-Secure FAX
Declassified or
Sanitized/Sensitive
-Secure Web-Server
-Trusted Partner
Channels
- ISAC
Unclassified/
Non-sensitive
-NIPC Public Web-Server
-ANSIR
-ISAC
NIPC Organization
NIPC Director
Deputy Director
Computer Investigations and
Operations Section (CIOS)
Analysis and Warning
Section (AWS)
Training, Outreach and
Strategy Section (TOSS)
Computer Investigations
Unit
Analysis and Information
Sharing Unit
Training and Continuing
Education Unit
Special Technologies
Applications Unit
Watch and Warning
Unit
Outreach and Field
Support Unit
Cyber Emergency Support
Team
Strategic Planning Unit
InfraGard
Our Code of Ethics





Public – Private partnership to protect U.S.
critical infrastructures
Belief in sharing knowledge
Serve Infragard and public in a diligent, loyal,
honest manner, and not commit illegal acts
Maintain confidentiality of fellow members
Protect and respect privacy rights, civil rights,
and physical and intellectual property of others
Local and National
InfraGard Update
Hawaii InfraGard Chapter (HIGC)
Yearly Report



Kickoff Conference in March 2000
4 Quarterly Meetings
Guest Speakers
–
–
–
–

Jed Haile (Snort – intrusion detection system)
Omer Poirier (United States Attorney’s Office)
Det. Chris Duque (Honolulu Police Department)
Jodi Ito (Implementing Security Policies)
Raised InfraGard Awareness
HIGC
Yearly Report (cont.)

17 members
–
–

9 Secure
8 Unsecure
Provisional Board Leadership
–
–
–
–
Sterling Yee (HEI)
Lester Nakamura (State of Hawaii)
Jodi Ito (University of Hawaii)
Janice Reitzel (Naval Criminal Investigative Service)
National InfraGard Program
Yearly Report

Attorney General Announcement

All 56 FBI Field Offices Participating

Leadership from Provisional National Executive
Committee

Membership Opportunities
–
SANS 30% discount good through June, 2001
National InfraGard Program
Yearly Report (cont.)

National Public Website Operational
–

National Secure Website Operational
–

http://www.infragard.net
https://www.infragard.org
Several Chapter Websites Operational
–
http://www.hawaii.edu/infragard (work in progress)
The Future
of
InfraGard
HIGC
Our Goals

Defining our Goals
–
–
–
–
–
Increase membership in InfraGard
Transition leadership to members
Enhance local reporting to NIPC
Enhance liaison between members
Serve community through public service
HIGC
Our Plans

Change in Meeting Format
–
Monthly Member Meetings




–
Emphasis on “working” roundtable to address infrastructure
security issues
Begin with report from FBI on significant events
Time to address local and national InfraGard business
To be held at FBI field office on set date
Periodic Meetings Open to Public


Designed to enhance public awareness of InfraGard
Feature presentations related to protecting the information
infrastructure.
HIGC
Future Plans

Formation of Committees
–
Advisory



–
Outreach



–
Officers
Chapter by-laws
Organization
Plan meetings
Communications
Manage local website
Public Service
National InfraGard Program
Election of Board *




The National InfraGard Board will consist of seven
members and will replace the Provisional National
Executive Committee
Each chapter can nominate one member to serve
Each chapter can vote for up to seven unique
nominees
The seven nominees with the most votes will be
appointed
* The process for the election has not been finalized.
National InfraGard Program
First National Conference



To be held on 6/11-14/2001
in San Diego, California
Each local chapter is
funded to send InfraGard
Coordinator and one
delegate
Order of business includes
election of National
InfraGard Board
Membership Options
InfraGard Membership
Three Options



None (no affiliation)
Membership
Secure Membership
Membership is by organization, not individual
InfraGard
Membership -
None

Can attend periodic meetings that are open to
the public

Can receive periodic information on InfraGard
–
Mostly periodic meeting announcements
InfraGard
Membership 






Member
Requires execution of membership agreement
Requires agreement to Code of Ethics
Can participate in monthly meetings
Can vote in local and national elections
Can serve as an officer, committee member
FBI check NOT conducted
Allows for participation of multiple individuals
from one organization
InfraGard
Memberhip 
Requires execution of Secure Access
Agreement (SAA)
–
–


Provides legal framework for information sharing
SAA must be signed by “Authorized Binding Official”
Requires execution of Designated
Representative (DR) Information form (DR)
–

Secure
Member
Designates individual in organization who will have
access to the secure server
FBI check conducted on DR and organization
DR has all privileges of member
InfraGard
Membership - Disclosure




FBI policy not to disclose identify of members
Members may disclose affiliation
Local members will be asked if they would like
to be listed in a membership directory
Membership directory distributed to members
only and use must be consistent with Code of
Ethics
On-Line Demonstration
of Services
Advisories
SA Matthew Morin
Honolulu FBI
mmorin@leo.gov
(808) 566-4300
Download