Computing Research Policy Blog

New DARPA Director Announced

Regina Dugan will become the first woman to head the Defense Advanced Research Projects Agency (DARPA) in its 51-year history, the Department of Defense announced today. Dugan takes the reins from acting director, Robert Leheny, who has been running the agency since Tony Tether stepped down in February 2009.

From the official press release:

"Regina Dugan is precisely the dynamic leader DARPA needs to open new technology frontiers and transition revolutionary technologies to serve our nation’s interests," said Zachary J. Lemnios, director, Defense Research and Engineering.  "I am delighted she will be leading this agency and look forward to working closely with her."
 
Prior to this appointment, Dugan held several key positions in industry, most recently as president and chief executive officer of RedXDefense, LLC, which she co-founded in 2005, a company that develops defense against explosive threats.  She has also served in senior executive positions in several additional companies in roles ranging from global sales and marketing to research and product development.   
 
During her first tour at DARPA from January 1996 to May 2000, Dugan received the program manager of the year award for her leadership of the "Dog’s Nose Program", which was focused on the development of an advanced, field-portable system for detecting the explosive content of land mines.  She is also the recipient of the deFleury Medal, the office of the secretary of defense award for exceptional service, and the award for outstanding achievement.  She has participated in wide-ranging studies for the Defense Science Board, the Army Science Board, the National Research Council and Science Foundation, and currently sits on the Naval Research Advisory Committee and the Defense Threat Reduction Agency Science and Technology Panel. 

While Tether's tenure with DARPA was the longest of any DARPA director, it also caused strain between the agency and the university research community -- particularly the university computing research community -- who felt that under his leadership, DARPA adopted policies that discouraged university participation in defense-related research. This blog has spilled a considerable number of electrons making that case as well. With the appointment of Dugan (and with someone familiar with the computing community in Lemnios as Director Defense Research and Engineering (DDR&E)) it's fair to say the community is optimistic some of those incredibly productive ties between university researchers and the agency will get restored. We'll let you know how it progresses!

House S&T Committee Assesses Cybersecurity Activities at NIST and DHS.

The House Science and Technology committee held a hearing last Thursday afternoon to asses the cybersecurity efforts of the Department of Homeland Security (DHS) and the National Institute of Standards and Technology (NIST). The committee reviewed the agencies' current cybersecurity programs, asking the advice of private sector security experts on the role the federal government has in securing the private sector's infrastructure, enhancing the monitoring of federal networks, and more clearly defining cybersercurity metrics. Called to testify were Mr. Greg Wilshusen, the Director of Information Security Issues at the Government Accountability Office (GAO); Mr. Mark Bregman, the Executive Vice President and Chief Technology Officer of Symantec Corportation; Mr. Scott Charney, the Corporate Vice President of Microsoft's Trustworthy Computing Group; and Mr. Jim Harper, the Director of Information Policy Studies at the Cato Institute.

In his opening statement, Technology and Innovation Subcommittee Chairman David Wu (D-OR) asked the witnesses what is required to implement the recommendations of the 60-day review. He praised the review's call to develop metrics to improve program assessment, budgeting, research and development, and planning. He stressed, however, that the $830M request this year from NIST and DHS on cybersecurity efforts needs to used wisely.

The panelists were circumspect about the role of the new cybersecurity czar, warning against government taking too large a role by acting as a co-partner or regulator of industry. Government, they agreed, should set security policy, minimum goals and desired outcomes, as well as facilitate best practices to help agencies meet these goals.

Mr. Wilshusen pointed out that DHS has yet to fully satisfy its cybersecurity requirements. He recommended that DHS work to bolster cyber analysis and warning systems, improve infrastructure control systems, strengthen recovery ability, reduce organizational inefficiencies, and secure internal information systems.

Mr. Bregman higlighted the global nature of problems in cybersecurity, "We all are using the same hardware and software. We all share the risks of cybersecurity." Bregman defined the role of DHS and NIST as agencies that provide strategic direction, coordination, and balance for the nation, as well as taking a prominent role in international cybersecurity.

In his opening testimony, Mr. Charney remarked, "Government must develop a model for managing its own security." Charney supported the near-term action plan of the administration's review, especially in areas where DHS and NIST can expand their capabilities to support government-wide policy, standards and oversight of cybersecurity.

Mr. Harper responded to the review by expressing his concern with threat exaggeration that may lead to policies that supress competition and jeopardize civil liberties. Government, he stated, is a large consumer of cybersecurity goods, and can set high standards simply in its purchasing of products. Companies, he explained, should bear the burden of failure, not the government.

Mr. Wu's question regarding public-private partnerships spurred a good deal of discussion. Charney, while agreeing with Mr. Harper regarding market liability, added that the market can supply security for the government in some cases and in other cases cannot. The government can fill in the gap by providing appropriate incentives. Charney acknowledged that there is some research industry cannot do because there is no economic model for it (e.g. the Internet). Mr. Bregman added that a clearly defined research agenda would stimulate investment in both the private and academic worlds. By aligning the research agendas of government agencies, a larger community of expertise can be created. Mr. Harper responded by stressing the importance of government and industry staying in their roles, and working separately in their respective areas.

Thursday's hearing was the last of three hearings on cybersecurity in response to the administration's Cyberspace Policy Review (pdf). For more information about the first hearing and second hearing, including testimony from the Computing Research Association board member Dr. Fred Schneider, see our earlier blog post.

An archived web cast of the hearing as well as copies of witness testimonies can be found on the House S&T Committee website.

Microsoft Research TechFair 2009

Microsoft Research hosted its annual TechFair this Wednesday afternoon to show off some of the organization's newest innovations to the DC policy crowd and the press. Held at the Newseum in Washington D.C., the event gave visitors an opportunity to chat with researchers about projets that addressed challenges in energy sustainability and efficiency, privacy, as well as personal and research productivity.

Microsoft Research provided 13 demonstrations that included an interactive omni-directional projector (see right), a system for social grouping of a user's communication, an in-car dialogue system that allows natural language input, and a large scale spamming botnet detector called BotGraph.

This new system can uncover correlations among botnet activities by constructing a large scale user graph of major Web-email services and looks for patterns of use among "spam" accounts.

Social graphing appeared a number of times during the roadshow. One project used a social network graph in order to create a "trust" recommendation system by weighting the recommendations of direct relationships over indirect relationships.

Two projects concerned themselves with the scientific research community, attempting to manage research workflows and make processing large amounts of data simpler and easier for scientists. Dryad, a distributed computing engine, simplifies the task of distributed applications on clusters of Windows computers. Trident makes it easy for scientists to design and manipulate workflows without having to rewrite the original algorithm (see below). Both systems will be offered as open-source software the research communiuty.

Another project, the Commute UX dialog system (see below), hopes to make a drivers interaction with the many devices they use in the car safer and easier to use. The system is able to activate song playlists, make phone calls, and read and send text messages through natural speech.
Also on display was PINQ, the organization's attempt at making privacy preservation easy for privacy non-experts. Data analysis of private data is still possible since PINQ gives access to the metadata generated from a computation while hiding the content itself.

Microsoft holds their TechFair in hopes that their demonstrations will highlight their committment to innovative research as well as to their ongoing collaboration with top universities around the world.

House S&T Committee Discusses Cyberspace Policy Review Report With Federal Agencies

The House Science and Technology Committee held a hearing Tuesday afternoon to review the response of the Department of Homeland Security (DHS), the National Institute of Standards and Technology (NIST), the National Science Foundation (NSF), and the Defense Advanced Research Projects Agency (DARPA) to the Administration's recently released Cyberspace Policy Review (pdf). Near-term and mid-term action plans in the review raise a number of concerns relevant to the Committee's work. These issues center around federal agency efforts in research and development, education, standards, information coordination and interagency collaboration. Witnesses called to testify were Ms. Cita Furlani, Director of the Information Technology Laboratory (NIST); Dr. Jeannette Wing, Assistant Director at the Directorate for Computer & Information Science & Engineering (NSF); Dr. Robert Leheny, Acting Director (DARPA); Dr. Peter Fonash, Acting Deputy Assistant Secretary at the Office of Cyber Security Communications (DHS).

Technology and Innovation Subcommittee Chairman David Wu (D-OR) opened the hearing by expressing his concern regarding previous federal cyber security efforts he believes were too "output oriented" rather than "outcome driven", and was hopeful that the new administration will focus on achieving fewer breaches of federal systems, fewer cases of identity theft, as well as ensuring the security of smart grid systems and health IT systems. In his opening statement, he called upon witnesses to explain how each agency hopes to improve its cyber security in light of the Administration's review.

Speaking next, Representative Adrian Smith (R-NE) drew attention to the agencies' efforts in investing appropriately in cyber security research and development, securing the dot-gov domain as well as the critical infrastructure of the private sector.

Research and Science Education Subcommittee Chairman Daniel Lipinski (D-IL) emphasized the need for increased collaboration between public and private sectors to expose weaknesses in security and share breach information, as well as a multidisciplinary approach to cyber security in order to understand how we interact with computers and their information, calling people the "weakest link" in cyber security.

In their opening remarks, the witnesses discussed their responses to the review. They each expressed their appreciation that the review highlights the need for unclassified cyber security research and cyber security education. Ms. Furlani restated NIST's mission to work with federal, state, local, private and academic institutions to develop the standards for information security. Dr. Wing, reminded the committee that many security measures implemented today are built on practices that were designed decades ago. Wing called for increased openness in the field of cyber security research. Looking ahead, she stated that the need to develop new practices based on current research could be filled by such an increase in the collaboration between industry and academic research institutions. Dr. Leheny echoed previous remarks that recognized the need for innovation to address cyber security threats. He also highlighted a DARPA project to develop a National Cyber Range that would have the ability to perform rigorous, realistic assessments of cyber security technology. In response to the review, Dr. Fonash described the role of the DHS in updating national security strategy, strengthening international partnerships, educating the public, and working with the U.S. Computer Emergency Response Team (CERT) to prepare for plan for cyber incidents.

The member questions tended not to focus on any particular issue. Rep. Ehlers (R-MI) asked the panel how we can ensure security and at the same time preserve the freedom of unfettered communication. Rep. Ehlers' question about the decreasing enrollment of computer science majors in the U.S. led to a discussion of the various programs each agency has in order to address the seeming decline in computer science interest among students. Dr. Wing, citing the CRA Taulbee Survey and expressed hope that the recent uptick in enrollments will continue. Dr. Leheny described two DARPA programs that focus on developing the attractiveness of computer science for undergraduates and untenured faculty. Rep. Lujan asked the witnesses how we can tap into the expertise of classified cyber security practices and research. Wing responded by explaining the formal process for agency collaboration under the National Coordinating Office for Networking and Information Technology Research and Development (NITRD) where unclassified IT research and development investments for thirteen Ferderal agencies are coordinated. Rep. Smith, while acknowledging the need for public and private partnership in cyber security, asked Dr. Fonash how the private sector can be compelled to follow standards. Fonash responded by stressing the importance of information sharing programs in order for industry to not only be aware of security standards, but that they know how to take the appropriate measures to secure their private data. When pressed about the need for legislation in this regard, Fonash replied that he couldn't say yes or no at this time.

Tuesday's hearing was the second of three hearings on cyber security. The first hearing was held by the Research and Science Education Subcommittee on the research needs of improved cyber security. Computing Research Association board member Dr. Fred Schneider testified about the state of cyber security education as well as the range of federally supported research. The final hearing regarding the cyber security activities of NIST and the DHS will be held next week.

An archived webcast of the hearing as well as copies of witness testimonies can be found on the House S&T Committee website.