83 FR 1342 - Promoting Stakeholder Action Against Botnets and Other Automated Threats
DEPARTMENT OF COMMERCE
National Telecommunications and Information Administration Federal Register Volume 83, Issue 8 (January 11, 2018)
National Telecommunications and Information Administration
Federal Register Volume 83, Issue 8 (January 11, 2018)
| Page Range | 1342-1344 | |
| FR Document | 2018-00322 |
[Federal Register Volume 83, Number 8 (Thursday, January 11, 2018)] [Notices] [Pages 1342-1344] From the Federal Register Online [www.thefederalregister.org] [FR Doc No: 2018-00322] ----------------------------------------------------------------------- DEPARTMENT OF COMMERCE National Telecommunications and Information Administration [Docket No. 180103005-8005-01] RIN 0660-XC040 Promoting Stakeholder Action Against Botnets and Other Automated Threats AGENCY: National Telecommunications and Information Administration, U.S. Department of Commerce. ACTION: Notice, request for public comment. ----------------------------------------------------------------------- SUMMARY: The Department of Commerce (Department) is requesting comment on a draft Report about actions to address automated and distributed threats to the digital ecosystem as part of the activity directed by Executive Order 13800, ``Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure.'' Through this Notice, the Department seeks broad input and feedback from all interested stakeholders--including private industry, academia, civil society, and other security experts--on this draft Report, its characterization of risks and the state of the ecosystem, the goals laid out, and the actions to further these goals. DATES: Comments are due on or before 5 p.m. Eastern Time on February 12, 2018. ADDRESSES: Written comments may be submitted by email to [email protected]. Written comments also may be submitted by mail to the National Telecommunications and Information Administration, U.S. Department of Commerce, 1401 Constitution Avenue NW, Room 4725, Attn: Evelyn L. Remaley, Deputy Associate Administrator, Washington, DC 20230. For more detailed instructions about submitting comments, see the ``Instructions for Commenters'' section of SUPPLEMENTARY INFORMATION. FOR FURTHER INFORMATION CONTACT: Megan Doscher, tel.: (202) 482-2503, email: [email protected], or Allan Friedman, tel.: (202) 482-4281, email: [email protected], National Telecommunications and Information Administration, U.S. Department of Commerce, 1401 Constitution Avenue NW, Room 4725, Washington, DC 20230. Please direct media inquiries to NTIA's Office of Public Affairs, (202) 482-7002, or at [email protected]. SUPPLEMENTARY INFORMATION: Background: Executive Order 13800 on Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure called for ``resilience against botnets and other automated, distributed threats.'' \1\ The Order directed the Secretary of Commerce, together with the Secretary of Homeland Security, to ``lead an open and transparent process to identify and promote action by appropriate stakeholders'' with the goal of ``dramatically reducing threats perpetrated by automated and distributed attacks (e.g., botnets).'' \2\ --------------------------------------------------------------------------- \1\ Exec. Order 13800, 82 FR 22,391 (May 11, 2017). \2\ Id. --------------------------------------------------------------------------- The Departments of Commerce and Homeland Security worked jointly on this effort through three approaches--hosting a workshop, publishing a request for comment, and initiating an inquiry through the President's National Security Telecommunications Advisory Committee (NSTAC)--all aimed at gathering a broad range of input from experts and stakeholders, including private industry, academia, and civil society. The Departments worked in consultation with the Departments of Defense, Justice, and State, the Federal Bureau of Investigation, the sector- specific agencies, the Federal Communications Commission, and Federal Trade Commission, as well as other interested agencies. These activities all contributed to the information gathering process for developing a draft Report. The draft Report, published on January 5, 2018, and available at https://www.ntia.doc.gov/report/2018/report-president-enhancing-resilience-internet-and-communications-ecosystem-against, characterizes the status of the internet and communications ecosystem, and offers a positive vision of the future. The Departments determined that the opportunities and challenges in working toward [[Page 1343]] dramatically reducing threats from automated, distributed attacks can be summarized in six principal themes. 1. Automated, distributed attacks are a global problem. The majority of the compromised devices in recent botnets have been geographically located outside the United States. Increasing the resilience of the internet and communications ecosystem against these threats will require coordinated action with international partners. 2. Effective tools exist, but are not widely used. The tools, processes, and practices required to significantly enhance the resilience of the internet and communications ecosystem are widely available, if imperfect, and are routinely applied in selected market sectors. However, they are not part of common practices for product development and deployment in many other sectors for a variety of reasons, including (but not limited to) lack of awareness, cost avoidance, insufficient technical expertise, and lack of market incentives. 3. Products should be secured during all stages of the lifecycle. Devices that are vulnerable at time of deployment, lack facilities to patch vulnerabilities after discovery, or remain in service after vendor support ends make assembling automated, distributed threats far too easy. 4. Education and awareness is needed. Knowledge gaps in home and enterprise customers, product developers, manufacturers, and infrastructure operators impede the deployment of the tools, processes, and practices that would make the ecosystem more resilient. 5. Market incentives are misaligned. Perceived market incentives do not align with the goal of ``dramatically reducing threats perpetrated by automated and distributed attacks.'' Market incentives motivate product developers, manufacturers, and vendors to minimize cost and time to market, rather than to build in security or offer efficient security updates. There has to be a better balance between security and convenience when developing products. 6. Automated, distributed attacks are an ecosystem-wide challenge. No single stakeholder community can address the problem in isolation. The Report lays out five complementary and mutually supportive goals that would dramatically reduce the threat of automated, distributed attacks and improve the resilience of the ecosystem. They are: 1. Identify a clear pathway toward an adaptable, sustainable, and secure technology marketplace; 2. Promote innovation in the infrastructure for dynamic adaptation to evolving threats; 3. Promote innovation at the edge of the network to prevent, detect, and mitigate bad behavior; 4. Build coalitions between the security, infrastructure, and operational technology communities domestically and around the world; and 5. Increase awareness and education across the ecosystem. For each goal, the report suggests supporting activities to be taken by both government and private sector actors. With this Request for Comment, the Department is asking for a response to the issues and goals raised by the draft Report, as well as the proposed approach, current initiatives, and next steps. Following the completion of the comment period, the Department will host a workshop to discuss substantive comments and the way forward for the Report. The workshop will be held February 28-March 1, 2018 at the National Cybersecurity Center of Excellence (NCCoE). Additional information regarding the workshop, including logistics and registration information, is available at https://csrc.nist.gov/Events/2018/second-botnet-workshop. Information obtained through this Request for Comment, the NCCoE- hosted workshop, and other stakeholder interactions will be considered for incorporation into the final version of the Report. The final Report is due to the President on May 11, 2018. Request for Comment The goal of this Request for Comment is to solicit feedback on the draft Report, its characterization of the challenges, and proposed actions. The Department invites comment on the full range of issues that may be presented by this inquiry, including issues that are not specifically raised in the following questions. Respondents are invited to respond to some or all of the questions below: 1. The Ecosystem: Is the Report's characterization of risks and the state of the current internet and communications ecosystem accurate and/or complete? Are there technical details, innovations, policy approaches, or implementation barriers that warrant new or further consideration? 2. Goals: Are the Report's stated goals appropriate for achieving a more resilient ecosystem? Do the actions support the relevant goals? In aggregate, are the actions sufficient to significantly advance the goals? 3. Stakeholder Roles: How can specific actions be refined for efficacy and achievability? What actors, inside the Federal government, in the private sector, and across the global community, can be instrumental in the successful accomplishment of these activities? Who should play a leadership role; and where and how? What stakeholders are key to particular successes? 4. Road map: What information can help the government and stakeholders delineate a road map for achieving these goals? How should implementation be phased to optimize resources and commitments? Which actions are of highest priority, or offer opportunities for near term progress? Which actions depend on the completion of other actions? Are there known barriers that may inhibit progress on specific actions? 5. Incentives: What policies, innovations, standards, best practices, governance approaches, or other activities can promote market-based solutions to the challenges and goals discussed in the report? Are there specific incentive ideas beyond the market-based approaches discussed in the report (e.g., procurement, multistakeholder policy development, R&D, best practices, and adoption & awareness efforts) that demand new consideration or exploration? 6. Further Activities: What additional specific actions can improve the resilience of the internet and communications ecosystem? What partners can drive success for these activities? 7. Metrics: How should we evaluate progress against the stated goals? Instructions for Commenters: The Department invites comment on the full range of issues that may be presented by this inquiry, including issues that are not specifically raised in the above questions. Commenters are encouraged to address any or all of the above questions. Comments that contain references to studies, research, and other empirical data that are not widely available should include copies of the referenced materials with the submitted comments. Comments submitted by email should be machine-readable and should not be copy-protected. Responders should include the name of the person or organization filing the comment, which will facilitate agency follow up for clarity as necessary, as well as a page number on each page of their submissions. All comments received are a part of the public record and will generally be posted on the NTIA website, http://www.ntia.doc.gov/, without change. All personal identifying information (for example, name, [[Page 1344]] address) voluntarily submitted by the commenter may be publicly accessible. Do not submit confidential business information or otherwise sensitive or protected information. The Department will also accept anonymous comments. Dated: January 5, 2018. David J. Redl, Assistant Secretary for Communication and Information, National Telecommunications and Information Administration. [FR Doc. 2018-00322 Filed 1-10-18; 8:45 am] BILLING CODE 3510-60-P
![1342 Federal Register / Vol. 83, No. 8 / Thursday, January 11, 2018 / Notices
193–411, and (3) enter your name and the intent to take final action to address instructions about submitting
email address (required). After logging the emergency. comments, see the ‘‘Instructions for
in to the webinar, you must use your Commenters’’ section of SUPPLEMENTARY
Special Accommodations
telephone for the audio portion of the INFORMATION.
meeting by dialing this TOLL number This meeting is physically accessible FOR FURTHER INFORMATION CONTACT:
(1) dial this TOLL number 1–415–655– to people with disabilities. Requests for Megan Doscher, tel.: (202) 482–2503,
0052, (2) enter the attendee phone audio sign language interpretation or other email: mdoscher@ntia.doc.gov, or Allan
access code 564–202–797, and (3) then auxiliary aids should be directed to Mr. Friedman, tel.: (202) 482–4281, email:
enter your audio phone pin (shown after Kris Kleinschmidt (503) 820–2411 at afriedman@ntia.doc.gov, National
joining the webinar). Note: Technical least 10 business days prior to the Telecommunications and Information
Information and system requirements: meeting date. Administration, U.S. Department of
PC-based attendees are required to use Dated: January 8, 2018. Commerce, 1401 Constitution Avenue
Windows® 7, Vista, or XP; Mac®-based Tracey L. Thompson, NW, Room 4725, Washington, DC
attendees are required to use Mac OS® Acting Deputy Director, Office of Sustainable 20230. Please direct media inquiries to
X 10.5 or newer; Mobile attendees are Fisheries, National Marine Fisheries Service. NTIA’s Office of Public Affairs, (202)
required to use iPhone®, iPad®, [FR Doc. 2018–00378 Filed 1–10–18; 8:45 am] 482–7002, or at press@ntia.doc.gov.
AndroidTM phone or Android tablet (See SUPPLEMENTARY INFORMATION:
BILLING CODE 3510–22–P
the https://www.gotomeeting.com/ Background: Executive Order 13800
webinar/ipad-iphone-android-webinar- on Strengthening the Cybersecurity of
apps). You may send an email to Mr. DEPARTMENT OF COMMERCE Federal Networks and Critical
Kris Kleinschmidt at Infrastructure called for ‘‘resilience
Kris.Kleinschmidt@noaa.gov or contact National Telecommunications and against botnets and other automated,
him at (503) 820–2280, extension 411 Information Administration distributed threats.’’ 1 The Order
for technical assistance. directed the Secretary of Commerce,
[Docket No. 180103005–8005–01]
Council address: Pacific Fishery together with the Secretary of Homeland
Management Council, 7700 NE RIN 0660–XC040 Security, to ‘‘lead an open and
Ambassador Place, Suite 101, Portland, transparent process to identify and
OR 97220. Promoting Stakeholder Action Against
promote action by appropriate
Botnets and Other Automated Threats
FOR FURTHER INFORMATION CONTACT: Dr. stakeholders’’ with the goal of
Kit Dahl, Pacific Council; telephone: AGENCY: National Telecommunications ‘‘dramatically reducing threats
(503) 820–2422. and Information Administration, U.S. perpetrated by automated and
Department of Commerce. distributed attacks (e.g., botnets).’’ 2
SUPPLEMENTARY INFORMATION: At its The Departments of Commerce and
September 2018 meeting, the Pacific ACTION: Notice, request for public
comment. Homeland Security worked jointly on
Council decided to embark on the this effort through three approaches—
Climate and Communities Initiative SUMMARY: The Department of Commerce hosting a workshop, publishing a
pursuant to its Fishery Ecosystem Plan. (Department) is requesting comment on request for comment, and initiating an
The purpose of this initiative is to help a draft Report about actions to address inquiry through the President’s National
the Pacific Council, its advisory bodies, automated and distributed threats to the Security Telecommunications Advisory
and the public to better understand the digital ecosystem as part of the activity Committee (NSTAC)—all aimed at
effects of near-term climate shift and directed by Executive Order 13800, gathering a broad range of input from
long-term climate change on our fish, ‘‘Strengthening the Cybersecurity of experts and stakeholders, including
fisheries, and fishing communities and Federal Networks and Critical private industry, academia, and civil
identify ways in which the Council Infrastructure.’’ Through this Notice, the society. The Departments worked in
could incorporate such understanding Department seeks broad input and consultation with the Departments of
into its decision-making. As a first step, feedback from all interested Defense, Justice, and State, the Federal
the Council’s Ad Hoc Ecosystem stakeholders—including private Bureau of Investigation, the sector-
Workgroup is working with scientists at industry, academia, civil society, and specific agencies, the Federal
NMFS Northwest and Southwest other security experts—on this draft Communications Commission, and
Fisheries Science Centers to present a Report, its characterization of risks and Federal Trade Commission, as well as
series of webinars to educate the Pacific the state of the ecosystem, the goals laid other interested agencies. These
Council, advisory bodies, and the out, and the actions to further these activities all contributed to the
interested public about current research goals. information gathering process for
and forecasts related to the effects of developing a draft Report.
climate variability/change on the DATES: Comments are due on or before
5 p.m. Eastern Time on February 12, The draft Report, published on
California Current Ecosystem. January 5, 2018, and available at https://
Although non-emergency issues not 2018.
www.ntia.doc.gov/report/2018/report-
contained in the meeting agenda may be ADDRESSES: Written comments may be president-enhancing-resilience-internet-
discussed, those issues may not be the submitted by email to counter_botnet@ and-communications-ecosystem-
subject of formal action during this list.commerce.gov. Written comments against, characterizes the status of the
meeting. Action will be restricted to also may be submitted by mail to the
srobinson on DSK9F5VC42PROD with NOTICES
internet and communications
those issues specifically listed in this National Telecommunications and ecosystem, and offers a positive vision
document and any issues arising after Information Administration, U.S. of the future. The Departments
publication of this document that Department of Commerce, 1401 determined that the opportunities and
require emergency action under section Constitution Avenue NW, Room 4725, challenges in working toward
305(c) of the Magnuson-Stevens Fishery Attn: Evelyn L. Remaley, Deputy
Conservation and Management Act, Associate Administrator, Washington, 1 Exec. Order 13800, 82 FR 22,391 (May 11, 2017).
provided the public has been notified of DC 20230. For more detailed 2 Id.
VerDate Sep<11>2014 00:05 Jan 11, 2018 Jkt 244001 PO 00000 Frm 00016 Fmt 4703 Sfmt 4703 E:\FR\FM\11JAN1.SGM 11JAN1](https://thefederalregister.org/doc/83_FR_1350/page/1.svg)
![1344 Federal Register / Vol. 83, No. 8 / Thursday, January 11, 2018 / Notices
address) voluntarily submitted by the critical to the full accreditation and Secretary of Defense (Personnel and
commenter may be publicly accessible. successful operation of USU. These Readiness), in consultation with the
Do not submit confidential business actions are necessary for USU to pursue Office of the Department of Defense
information or otherwise sensitive or its mission, which is to educate, train General Counsel, has determined in
protected information. The Department and comprehensively prepare writing that this portion of the Board’s
will also accept anonymous comments. uniformed services health professionals, meeting will be closed as the discussion
Dated: January 5, 2018. officers, scientists and leaders to will disclose sensitive personnel
support the Military and Public Health information, will include matters that
David J. Redl,
Systems, the National Security and relate solely to the internal personnel
Assistant Secretary for Communication and
National Defense Strategies of the rules and practices of the agency, will
Information, National Telecommunications
and Information Administration.
United States, and the readiness of our involve allegations of a person having
Uniformed Services. committed a crime or censuring an
[FR Doc. 2018–00322 Filed 1–10–18; 8:45 am]
Agenda: The actions scheduled to individual, and may disclose
BILLING CODE 3510–60–P occur include the review of the minutes investigatory records compiled for law
from the Board meeting held on enforcement purposes.
November 3, 2017; recommendations Written Statements: Pursuant to
DEPARTMENT OF DEFENSE regarding the awarding of associate, section 10(a)(3) of the Federal Advisory
baccalaureate and post-baccalaureate Committee Act of 1972 and 41 CFR 102–
Office of the Secretary degrees; recommendations regarding the 3.140, the public or interested
approval of faculty appointments and organizations may submit written
Board of Regents, Uniformed Services
promotions; and recommendations comments to the Board about its
University of the Health Sciences;
regarding award nominations. The USU approved agenda pertaining to this
Notice of Federal Advisory Committee
President will provide a report on recent meeting or at any time regarding the
Meeting
actions affecting academic and Board’s mission. Individuals submitting
AGENCY: Under Secretary of Defense for operational aspects of USU. Member a written statement must submit their
Personnel and Readiness, Department of reports will include an Academics statement to the Designated Federal
Defense. Summary consisting of reports from the Officer at the address listed in the FOR
ACTION: Notice of Federal Advisory Dean of the F. Edward Hébert School of FURTHER INFORMATION CONTACT section.
Committee meeting. Medicine, Dean of the Daniel K. Inouye Written statements that do not pertain to
Graduate School of Nursing, Executive a scheduled meeting of the Board may
SUMMARY: The Department of Defense Dean of the Postgraduate Dental College, be submitted at any time. However, if
(DoD) is publishing this notice to Dean of the College of Allied Health individual comments pertain to a
announce that the following Federal Sciences, Director of the Armed Forces specific topic being discussed at the
Advisory Committee meeting of the Radiobiology Research Institute and the planned meeting, then these statements
Board of Regents, Uniformed Services President of the USU Faculty Senate. must be received at least 5 calendar
University of the Health Sciences will Member Reports will also include a days prior to the meeting, otherwise, the
take place. Finance and Administration Summary comments may not be provided to or
DATES: Tuesday, February 6, 2018; open consisting of reports from the Senior considered by the Board until a later
to the public from 8:00 a.m. to 10:05 Vice President, Southern Region; Senior
date. The Designated Federal Officer
a.m. Closed session will occur from Vice President, Western Region;
will compile all timely submissions
approximately 10:10 a.m. to 10:40 a.m. Commander, USU Brigade; and the
with the Board’s Chair and ensure such
ADDRESSES: Uniformed Services
President and CEO of the Henry M.
submissions are provided to Board
University of the Health Sciences, 4301 Jackson Foundation for the
Members before the meeting.
Jones Bridge Road, Everett Alvarez Jr. Advancement of Military Medicine.
There will be reports from the USU Vice Dated: January 8, 2018.
Board of Regents Room (D3001),
President for Research and the USU Aaron Siegel,
Bethesda, Maryland 20814.
Vice President for Finance and Alternate OSD Federal Register Liaison
FOR FURTHER INFORMATION CONTACT:
Administration. A closed session will be Officer, Department of Defense.
Jennifer Nuetzi James, 301–295–3066 held, after the open session, to discuss [FR Doc. 2018–00335 Filed 1–10–18; 8:45 am]
(Voice), 301–295–1960 (Facsimile), active investigations and personnel BILLING CODE 5001–06–P
jennifer.nuetzi-james@usuhs.edu actions.
(Email). Mailing address is 4301 Jones Meeting Accessibility: Pursuant to
Bridge Road, A1020, Bethesda, Federal statutes and regulations (5
Maryland 20814. Website: https:// DEPARTMENT OF ENERGY
U.S.C., Appendix, 5 U.S.C. 552b, and 41
www.usuhs.edu/vpe/bor. CFR 102–3.140 through 102–3.165) and Environmental Management Site-
SUPPLEMENTARY INFORMATION: This the availability of space, the meeting is Specific Advisory Board, Oak Ridge
meeting is being held under the open to the public from 8:00 a.m. to Reservation
provisions of the Federal Advisory 10:05 a.m. Seating is on a first-come
Committee Act (FACA) of 1972 (5 basis. Members of the public wishing to AGENCY: Department of Energy.
U.S.C., Appendix, as amended), the attend the meeting should contact ACTION: Notice of open meeting.
Government in the Sunshine Act of Jennifer Nuetzi James no later than five
1976 (5 U.S.C. 552b, as amended), and business days prior to the meeting, at SUMMARY: This notice announces a
srobinson on DSK9F5VC42PROD with NOTICES
41 CFR 102–3.140 and 102–3.150. the address and phone number noted in meeting of the Environmental
Purpose of the Meeting: The purpose the FOR FURTHER INFORMATION CONTACT Management Site-Specific Advisory
of the meeting is to provide advice and section. Pursuant to 5 U.S.C. 552b(c)(2, Board (EM SSAB), Oak Ridge
recommendations to the Secretary of 5–7), the Department of Defense has Reservation. The Federal Advisory
Defense, through the Under Secretary of determined that the portion of the Committee Act requires that public
Defense for Personnel and Readiness, on meeting from 10:10 a.m. to 10:40 a.m. notice of this meeting be announced in
academic and administrative matters shall be closed to the public. The Under the Federal Register.
VerDate Sep<11>2014 00:05 Jan 11, 2018 Jkt 244001 PO 00000 Frm 00018 Fmt 4703 Sfmt 4703 E:\FR\FM\11JAN1.SGM 11JAN1](https://thefederalregister.org/doc/83_FR_1350/page/3.svg)
Document Created: 2018-01-11 04:54:19
Document Modified: 2018-01-11 04:54:19
| Category | Regulatory Information | |
| Collection | Federal Register | |
| sudoc Class | AE 2.7: GS 4.107: AE 2.106: | |
| Publisher | Office of the Federal Register, National Archives and Records Administration | |
| Section | Notices | |
| Action | Notice, request for public comment. | |
| Dates | Comments are due on or before 5 p.m. Eastern Time on February 12, 2018. | |
| Contact | Megan Doscher, tel.: (202) 482-2503, email: [email protected], or Allan Friedman, tel.: (202) 482-4281, email: [email protected], National Telecommunications and Information Administration, U.S. Department of Commerce, 1401 Constitution Avenue NW, Room 4725, Washington, DC 20230. Please direct media inquiries to NTIA's Office of Public Affairs, (202) 482-7002, or at [email protected] | |
| FR Citation | 83 FR 1342 | |
| RIN Number | 0660-XC04 |
2025 Federal Register | Disclaimer | Privacy Policy
USC | CFR | eCFR