Free Newsletters
Technology & Business Daily

InfoWorld
Log-in | Register

Deepwater churns around unencrypted data

According to the central figures into the government's investigation of Deepwater, faulty radio encryption systems remain a threat to the nation's classified intelligence intranet


The most sensitive and highly classified data communicated over the nation's internal computer networks remains at risk for exposure, according to key witnesses in the government's investigation into the United States Coast Guard's Deepwater procurement program.

According to Michael DeKort, a former lead systems engineer at Lockheed Martin who has become the primary whistleblower in the Deepwater case, and James Atkinson, an electronic intelligence expert hired by Congress to look into security issues with communications equipment purchased as part of the program, radios that have insufficient encryption in place to protect classified government information remain in use by the Coast Guard today.

Congressional hearings into potential collusion and fraud carried out as part of Deepwater have already resulted in an ongoing Department of Justice investigation into the $24 billion procurement project.

And while the eight 123-foot Coast Guard cutters whose cracked hulls led to the initial discovery of problems in the Deepwater program remain in dry dock, other ships built under the project, including the flagship 418-foot National Security Cutter (NSC) currently being tested at sea, are still using the radios in question, the witnesses said.

At the heart of the problem are radios supplied by Integrated Coast Guard Systems (ICGS), a joint venture between massive contractors Lockheed Martin and Northrup Grumman, which was to retrofit all 49 of the Coast Guard's 110-foot cutters and extend them to 123 feet, and build an additional 91 new vessels under Deepwater.

The systems installed in the 123-foot ships, supplied to ICGS by Rockwell Collins, failed the Coast Guard's signal encryption tests as well as reviews carried out by the Navy, according to the two men, who are both experts in the field of communications and radio transmission security.

Yet, both military arms allowed the radios to be installed and have yet to ban the so-called C4ISR (command, control, communications, computers, intelligence, surveillance, and reconnaissance) systems in question, despite the experts' testimony before the Congressional Committee on Transportation and Infrastructure in mid-April, the witnesses claim.

Based on shortcomings in the encryption technologies used in the C4ISR systems being installed under Deepwater, anyone smart enough to look for radio transmissions emitted by the ships using the equipment could essentially gain access to the military's SIPRNet (Secret Internet Protocol Router Network), the men have testified.

Officials with the Navy and Coast Guard did not reply to calls seeking official comment on the matter, nor did media representatives with ICGS, Lockheed, and Northrup.

SIPRNet is used to communicate classified intelligence by not only the military, but also the Drug Enforcement Agency (DEA), Federal Bureau of Investigations (FBI), and National security Administration (NSA), among others.

Based on the problems, namely the communications systems' failure to meet the requirements of established government security emissions tests, the ships carrying the radios are not only vulnerable to eavesdropping, but may also transmit the unencrypted data over vast distances, DeKort said.

The whistleblower held a position as a Navy communications electronics technician for six years, and worked as a communications engineer in the State Department for two years, before going to work for Lockheed and being assigned to lead systems installation on the 123-foot Coast Guard ships.

"We were making it easy for people around the globe to intercept our government's classified intranet; not only is there the ability for eavesdropping, but because there is so much signal leakage onboard these boats, they transmit clear data outward as well," DeKort said. "Someone half-way around the world could be intercepting the externally transmitted data via satellite, or catching high-frequency radio signals when those types of transmissions travel longer distances at night."

The Coast Guard has already publicly touted the use of the retrofitted ships built under Deepwater in overseas operations, including efforts to repatriate Cuban immigrants to their homeland in 2006.

Matt Hines is a senior writer at InfoWorld.
Continued
1 | 2 | NEXT PAGE » 


Talkback:

commentPost a Comment

 

MOST COMMENTS

 
 





Remote Access: Maintain Security and Decrease the Burden on IT
Join this interactive webcast to discover how IT Managers can control access rights, end-user security settings and end-point authorization. Sponsor: Citrix(R) GoToMyPC(R) Corporate

»  Click here to view this Webcast
  Zombie PCs Are Attacking Your LAN
A recent study showed that malware-infected zombie PCs are now a bigger threat to ISPs and Web infrastructure than DoS attacks. As this brand new IT Strategy Guide explains, an increased use of peer-to-peer techniques by the attackers has made it harder to fight back. Download now, compliments of Verio:

»  Click here to download now

- Special Advertising Partners -
WHITE PAPERS
 

» Technology White Papers Library

Technology White Papers by Topic

Technology White Papers E-mail Alert

Find out when the latest white paper is available:
 
 
INFOWORLD MARKETPLACE
 
» BUY A LINK NOW
 
 

Video

 
 
 

Podcasts

 
 
 

 

Columnists

 
 
 

Resource Center


Ads by techwords beta  [See your link here]
 




Sponsored Technology Links

 
 
 HOME  NEWS  BLOGS  PODCASTS  VIDEOS  TECHNOLOGIES  TEST CENTER  EVENTS  CAREERS   About | Advertise | Awards | RSS | Contact Us 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy, Terms of Service.
All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses,
phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

CIO :: ComputerWorld :: CSO :: Demo :: GamePro :: Games.net :: IDG Connect :: IDG World Expo
Industry Standard :: IT World :: JavaWorld :: LinuxWorld :: MacUser :: Macworld :: Network World :: PC World :: Playlist