GCSB's 'Cortex' sought tie-up with ISP 17 Sep 2014
Related articles
- NZ hosts nuclear non-proliferation meeting News
- NZ consumers grow more upbeat, may resume spending Business
- Knowles quits as CEO of KiwiBank Business
- NZ migration bolstered by British invasion Migration
- NZ manufacturing activity reaches highest since 04 Business
- NZ dollar hits 22-month high vs euro Business
- Navy takes delivery of HMNZS Wellington News
- OceanaGold finds new gold deposits at Fraser mine Business
- Transpower gets go-ahead for $170m SI upgrade Business
- PM visits Turkey for Gallipoli anniversary News
GCSB's 'Cortex' sought tie-up with ISP
By Paul McBeth
Sept. 17 (BusinessDesk) - The Government Communications Security Bureau may expand its 'Project Cortex' to sharing malware-disrupting technology with local internet service providers, according to Cabinet papers declassified by Prime Minister John Key.
The project is described as countering advanced cyber threats and would see the communications-focused spy agency deliver advanced malware detection services to an undisclosed number of entities including government agencies and "organisations of high economic and/or operating critical national infrastructure", including niche exporters and research institutions. Those services would be an "active disruption" of foreign-sourced advanced malicious software, known as malware, reducing vulnerability to attack and mitigating harm by technical countermeasures acting before the fact by blocking the ability of malware to target organisations.
The GCSB recommended the extension of the 'active' programme to an internet service provider under pilot conditions, to see how it would work in a commercial context.
"If the pilot is successful, a proposal will be prepared for Ministerial consideration outlining the costs and benefits of wider deployment," according to an undated document entitled 'Project Cortex Business Case' that appears to have been written in late June or early July, based on dates on other documents. "This wider deployment would be led by industry, on a cost-recovery/profit basis, not by GCSB."
Spark New Zealand, the country's biggest ISP with about 49 percent of the market, hasn't had formal discussions with the GCSB about the project, according to a spokesman, while Vodafone New Zealand, which has about 32 percent of the market, declined to comment.
The GCSB met with an undisclosed number of major private sector firms deemed to be of national importance, all of whom "confirmed interest in engaging further on the proposals in the event that funding is secured." It considered charging users, but rejected that in the short-term as it would need an amendment to legislation.
The spy agency's business case focuses on "cyber-borne threats that are foreign-sourced and particularly advanced in terms of technical sophistication and/or persistence," said the document.
Under threat are intellectual property and damage to IT systems that can't be countered by commercial available tools, and malware had already targeted "key economic generators", including a large New Zealand firm, niche exporters in knowledge-intensive industries, major IT service providers and government agencies, the documents say.
"The economic harm caused by advanced malware is significant, although hard to quantify at the macroeconomic level or even for individual organisations. It is hard to quantify because, for example, in the case of loss of intellectual property (IP) - often the most immediate target of a successful malware attack - there is no widely accepted means of valuing IP prospectively."
A key plank of last year's legislative amendment governing the GCSB was splitting its information assurance activities from its cyber-security and cooperation functions to let the agency play a major role in the wider cyber-security domain, as host of the National Cyber Security Centre and sharing its capabilities and expertise with other agencies.
The GCSB won't procure or develop bespoke systems, instead integrating and components already available and tested over several years, including widely available commercial off-the-shelf systems, single source systems, and some available only through government-to-government agreement.
Key released the declassified papers yesterday in response to claims by Intercept journalist Glenn Greenwald and former US National Security Agency contractor-turned-whistleblower fugitive Edward Snowden, that New Zealand's GCSB embarked on plans to implement mass metadata surveillance, including the tapping of the Southern Cross Cable, in 2012 and 2013, in an initiative called 'Speargun'.
Key has insisted that the GCSB hasn't undertaken mass surveillance of New Zealanders or collects their metadata, and said the highest form of protection considered by the agency was never completed nor put to Cabinet.
Project Cortex wasn't seen as causing material privacy issues, with controls including how data is access, stored, shared and disposed of. The business plan said there will be no mass surveillance, and that data will be accessed by GCSB only with the consent of owners of relevant networks or systems.
According to a minute to a July 28, 2014 meeting, Cabinet decided against pursuing the GCSB's recommended option, which included the pilot ISP sharing programme. Instead, it directed the spy agency to consult with the Minister for Communications and Information Technology, currently Amy Adams, on plans to involve an ISP, and to report to Key, the Minister responsible for the GCSB, and the IT minister on the implications of including an ISP in the project.
The 'active' option backed by Cabinet would be 10 percent cheaper than the 'proactive' option preferred by GCSB, and would forgo a third of the benefits with "far fewer" organisations receiving the malware disruption service. That in turn would reduce security risk as GCSB technology wouldn't be shared with an ISP.
The GCSB is to report back to ministers with an option to embark on the pilot by September 2015, and a funding contingency was extended to Jan. 31, 2016.
The business case was reviewed in May and June of this year by Key as GCSB minister, Adams as IT minister, Finance Minister Bill English, Economic Development Minister Steven Joyce, Foreign Affairs Minister Murray McCully, Defence Minister Jonathan Coleman and Attorney-General Chris Finlayson.
(BusinessDesk)
News
Hilary Timmins' Award-Winning UK Documentary Series To Inspire NZ Students
29 Jun 2020 Education
Dream Catchers, produced and directed by Hilary Timmins, celebrates the success stories of more than thirty inspirational New... more
New Zealand reaffirms support for Flight MH17 judicial process
7 Mar 2020 News
Ahead of the start of the criminal trial in the Netherlands on 9 March, Foreign Minister Winston Peters has reaffirmed the need to... more
Business
NZ Government's Economic package to fight COVID-19
17 Mar 2020 Business News
The Coalition Government has launched the most significant peace-time economic plan in modern New Zealand history to cushion the... more
NZ Government announces aviation relief package
19 Mar 2020 Business News
Transport Minister Phil Twyford today outlined the first tranche of the $600 million aviation sector relief package announced earlier... more
Living
Diversity was Key at New Zealand Trade Tasting in London
6 Jun 2022 Food & Wine
New Zealand Winegrowers Annual Trade Tasting was recently held in London, on Wednesday 4 May, in Lindley Hall.
It was the first... more
Kiwi author stuns Behind the Butterfly Gate
12 Jan 2022 Arts
Hidden behind the Butterfly Gate is where the secret has been kept for 76 years...
New Zealand writer Merryn Corcoran’s... more
Property
Fairer rules for tenants and landlords
17 Nov 2019 Property
17 NOVEMBER 2019
The Government has delivered on its promise to the over one million New Zealanders who now rent to make it fairer... more
New Zealand Government will not implement a Capital Gains Tax
17 Apr 2019 Property
The Coalition Government will not proceed with the Tax Working Group’s recommendation for a capital gains tax, Jacinda Ardern... more
Migration
Boosting border security with electronic travel authority – now over 500,000 issued
19 Nov 2019 Migration
19 NOVEMBER 2019
We’ve improved border security with the NZeTA, New Zealand Electronic Travel Authority, which helps us to... more
Christchurch reinstated as refugee settlement location
18 Aug 2018 Migration
18 AUGUST 2018
HON IAIN LEES-GALLOWAY
The announcement that Christchurch can once again be a settlement location for refugees... more
Travel
Gallipoli Anzac Day services cancelled
19 Mar 2020 Travel & Tourism
The New Zealand and Australian Governments have announced this year’s joint Anzac Day services at Gallipoli will be cancelled... more
New Zealanders advised not to travel overseas
19 Mar 2020 Travel & Tourism
New Zealanders advised not to travel overseas
more
Sport
The Skipper's Diary: Sir Richard Hadlee honouring his father and NZ's Forty-Niners
27 Oct 2019 Cricket
NZNewsUK London Editor Charlotte Everett spoke to Sir Richard Hadlee about why he’s chosen to publish his father’s... more
PREVIEW: All Blacks v England semi-final
26 Oct 2019 Rugby
The two most convincing quarterfinals winners are set to square off in a semifinal showdown for the ages when the All Blacks meet old... more
Columns
Gordon Campbell on the Gareth Morgan crusade
11 Nov 2016 Opinion
Gordon Campbell on the Gareth Morgan crusade
First published on Werewolf
The ghastly likes of Marine Le Pen in France and Geert ... more
Gordon Campbell on the US election outcome
10 Nov 2016 Opinion
Column - Gordon Campbell
Gordon Campbell on the US election outcome
Well um.. on the bright side, there (probably)... more
Kiwi Success
Congratulations to Loder Cup winner
26 Sep 2018 People
25 SEPTEMBER 2018
The Loder Cup, one of New Zealand’s oldest conservation awards, has been awarded to Robert McGowan for 2018... more
Appointments to New Zealand National Commission for UNESCO
16 Aug 2018 Appointments
16 AUGUST 2018Appointments to New Zealand National Commission for UNESCO
HON JENNY SALESA
Associate Education Minister Jenny Salesa is... more
Recruitment
Historic pay equity settlement for education support workers
14 Aug 2018 Recruitment
14 AUGUST 2018Historic pay equity settlement for education support workers
RT HON JACINDA ARDERN
HON CHRIS HIPKINS
Prime Minister
The... more
Historic pay equity settlement for education support workers
22 Aug 2018 Recruitment
14 AUGUST 2018Historic pay equity settlement for education support workers
RT HON JACINDA ARDERN
HON CHRIS HIPKINS
Prime Minister
The... more