The Justice Department (DOJ) on Thursday issued a wide-ranging Report describing the Cyber-Threats facing the United States and the Department’s Tactics for Investigating, Disrupting, and Deterring those Risks. Most significantly, the Report contains the First Public Description of how the DOJ will Assess and Respond to Foreign Influence Operations like Russia’s 2016 Election Meddling.

“That policy reflects an effort to articulate neutral principles so that when the issue that the government confronted in 2016 arises again — as it surely will — there will be a framework to address it," Deputy Attorney General Rod Rosenstein said in unveiling the Report at the Aspen Security Forum. The Report also describes a range of Challenges hampering the Government’s Ability to Fight more traditional Cybercrime and recommends possible Solutions.

The Challenge that receives the most attention is Encryption and other Technological Impediments to accessing Investigative Data. The spread of Easy-to-Use, often invisible Encryption “poses a significant impediment to the investigation of most types of criminal activity,” the Report warns.

For years, the Government has urged Tech Companies to Voluntarily use Warrant-compatible Encryption, but in recent years Silicon Valley has moved in the opposite Direction. The Report recommends Seven ways for DOJ to respond to this problem, including “considering whether legislation to address encryption (and all related service provider access) challenges should be pursued.”

The lengthy Chapter on Foreign Influence Operations describes Five Categories of Meddling, from Hacking Election Infrastructure to Spreading Disinformation. It also lays out a Policy for Disclosing Foreign Meddling Investigations to their Targets, Tech Companies whose platforms are involved, Lawmakers and the Public.

This Meddling “may violate a number of federal laws on which the Department may base criminal investigations and prosecutions,” the Report says, but DOJ is “also considering whether new criminal statutes aimed more directly at this type of activity are needed.”

In addition to Foreign Influence Campaigns, the Report also covers the more prosaic Cybercrime Schemes that Prosecutors and Agents deal with on a Daily basis.

Chapter 2 discusses the types of Cybercrime that the Department investigates, from Distributed Denial-of-Service Attacks to Ransomware Infections.

Chapter 3 explains how the Government fights back, including Prosecution Tools like the Computer Fraud and Abuse Act, Techniques like Surveillance of Suspects and other response options like Dismantling Botnets.

Chapter 4 describes the Government’s Private-Sector Partnerships, Information-Sharing Channels and Interagency Response Plans.

Chapter 5 explains how different DOJ components are Training and Retaining Cybersecurity Experts.

Chapter 6 lays out the Challenges for Cybercrime Investigations and Prosecutions. Among them are the Reticence of Victims to Report Breaches, the Government’s sometimes tense Relationship with Security Researchers and Gaps in DOJ’s Legal Authority to access Data controlled by Foreign Companies.

In the Encryption section, DOJ notes that it cannot rely solely on Purchasing workarounds like Cellebrite or GrayKey. “Expanding the government’s exploitation of vulnerabilities for law enforcement purposes will likely require significantly higher expenditures — and in the end it may not be a scalable solution,” the report warns. “All vulnerabilities have a limited lifespan and may have a limited scope of applicability.”

Another problem relevant to Election Security is that the Computer Fraud and Abuse Act only empowers DOJ to Prosecute People who Hack Internet-connected Devices. “In many conceivable situations, electronic voting machines will not meet those criteria, as they are typically kept off the Internet,” the Report notes. “Consequently, should hacking of a voting machine occur, the government would not, in many conceivable circumstances, be able to use the CFAA to prosecute the hackers.”

At the Aspen event, Rosenstein said the Report underscored how DOJ “must continually adapt criminal justice and intelligence tools to combat hackers and other cybercriminals.”

The DOJ began compiling the Report in February, after Attorney General Jeff Sessions, under fire from Congressional Democrats for not appearing to prioritize Election Security, created a Cyber-Digital Task Force to Study DOJ-related Cyber Issues and “identify how federal law enforcement can more effectively accomplish its mission in this vital and evolving area.”

The Report mostly summarizes previously known Information about DOJ, its Headquarters components like the National Security Division and its Agencies like the FBI. In some cases, the Report copies and pastes Text directly from Federal Websites, including a Section describing INTERPOL Washington.










NYC Wins When Everyone Can Vote! Michael H. Drucker