Hill Tech Happenings, Week of May 14

May 17

Hearing:
The Crime, Terrorism and Homeland Security Subcommittee of the House Judiciary Hearing will meet on the Geolocational Privacy and Surveillance Act, H.R. 2168.
10 a.m., 2141 Rayburn Building

Posted in Events | Comments closed

USACM Comments on Electronic Health Records

USACM submitted its public comment on the proposed new and revised certification standards and implementation specifications that define the technological capabilities, functionality, and security of health information technology and electronic health records used in the Medicare and Medicaid Incentive Programs.

The proposed new and revised certification standards are part of the national effort to modernize our healthcare infrastructure under the Health Information Technology for Economic and Clinical Health Act (HITECH Act). The goal is to provide better managed patient care through improved health information technology and electronic health records.
Read More »

Posted in Web Accessibility | Comments closed

Hill Tech Happenings, Week of May 7

May 9

Hearing:
The Senate Commerce, Science and Transportation Committee will hold a hearing on the consumer privacy reports issued by the Federal Trade Commission and the Obama Administration.
2:30 p.m., 253 Russell Building

Posted in Events | Comments closed

The House Will Engage With Cybersecurity Legislation This Week

While Congress has tried to pass major cybersecurity legislation for the last few years, this week marks what could be a major step forward in finally getting a bill to the President’s desk.

The House leadership has scheduled four cybersecurity bills for votes on Thursday and Friday of this week. The bills up for consideration concern information sharing between the government and the private sector, an overhaul of the law covering how federal government systems manage cybersecurity, and research and development in cybersecurity.

Arguably none of these bills are properly comprehensive, but House leadership opted for a strategy of handling a number of bills across the cybersecurity landscape. The Senate is focused on approving a single comprehensive bill, though some Republicans have placed their support behind another bill. The issues of contention for the Senate bills are the roles played by the Homeland Security Department and the National Security Agency, as well as the level of regulation in the bills.

Given the multiple bills at play (only some of which have been mentioned in this post), USACM has prepared this statement outlining its interests in cybersecurity legislation. It’s important that cybersecurity legislation ensures that:

  • Any information sharing must include protections for personally identifiable information;
  • Unnecessary restriction of cybersecurity risk management options;
  • There are no broad certification requirements for cybersecurity professionals;
  • Cybersecurity education should include systems analysis and design;
  • There is continued federal support for cybersecurity research and development; and
  • There are targeted sets of cybersecurity standards.

What happens later this week on the floor of the House will be the first part of a longer process. The next steps should follow in the Senate in a matter of weeks.

Posted in ACM/USACM News, Privacy and Security | Comments closed

Hill Tech Happenings, Week of April 23

April 26 – Edited to note that the E-Verify hearing has been postponed.

April 24 – Edited to add E-Verify hearing for April 27.

The House is expected to consider four cybersecurity bills on Thursday and Friday, April 26 and 27.

April 24

Hearing:
The Senate Commerce, Science and Transportation Committee will hold a hearing on the migration of video viewing from broadcast and cable television to internet-enabled transmission mechanisms.
10 a.m., 253 Russell Building

The Subcommittee on Oversight, Investigations and Management of the House Homeland Security Committee will hold a hearing on the need to act on cybersecurity.
2 p.m., 311 Cannon Building

April 26

Hearing:
Two subcommittees of the House Homeland Security Committee will hold a hearing on the cybersecurity threats posed by Iran.
10 a.m., 311 Cannon Building

April 27

Hearing has been postponed.
Hearing:
The Subcommittee on Immigration Policy and Enforcement of the House Judiciary Committee will hold a hearing on electronic employment verification.
9:15 a.m., 2141 Rayburn Building

Posted in Events | Comments closed

Hill Tech Happenings, Week of April 16

April 17 – Edited to add House Homeland Security markup on April 18

April 18

Markup:
The House Oversight and Government Reform Committee will review a bill to update the Federal Information Security Management Act.
10 a.m., 2154 Rayburn Building

The House Homeland Security Committee will review a bill on information sharing related to cybersecurity.
10 a.m., 311 Cannon Building

Hearing:
The Immigration Subcommittee of the House Judiciary Committee will hold a hearing on electronic employment eligibility systems and document fraud.
11:15 a.m., 2141 Rayburn Building

April 19

Hearing:
The Human Resources Subcommittee of the House Ways and Means Committee will hold a hearing on how technology can help better target benefits and reduce waste, fraud, and abuse.
10 a.m., 1100 Longworth Building

Posted in Events | Comments closed

USACM Offers Recommendations On Data Privacy Codes of Conduct

Part of the Obama Administration’s proposed online privacy initiative involves consumer data privacy codes of conduct. These codes would be developed through a multi-stakeholder process, and the National Telecommunications and Information Administration (NTIA) is responsible for convening those processes.

To that end, NTIA released a request for comment in early March (the deadline was extended to April 2), and USACM filed comments earlier today. Much like our comments on the governance of the National Strategy for Trusted Identities in Cyberspace (NSTIC), the request and our comments are focused on issues of process and focus.

In our comments we encourage the NTIA to focus not only on the technologies and applications identified in their request for comment, but also to consider the assessments of privacy risks associated with these technologies and applications. We also recommended that the process – both the meetings and the output of those meetings – be made available to the public in formats that are easily reusable. Much like with NSTIC, trust is going to be an important contributor to the success or failure of the consumer data privacy codes of conduct.

Posted in ACM/USACM News, Privacy and Security | Comments closed

Federal Trade Commission Pushes Forward With Online Privacy Initiative

Yesterday the Federal Trade Commission (FTC) released the final version of its report on consumer privacy online. It issued a draft report in December 2010 and received over 450 comments in response, including those filed by USACM.

The final report retains the same general framework outlined in the December 2010 draft, and is broadly consistent with the effort to develop a Consumer Privacy Bill of Rights announced by the Obama Administration last month. In announcing the release of the report, the FTC indicated it would focus on the following areas in its online privacy work over the next several months.

Do-Not-Track – The Commission commends the progress made in this area: browser vendors have developed tools to allow consumers to limit data collection about them, the Digital Advertising Alliance has developed its own icon-based system and also committed to honor the browser tools, and the World Wide Web Consortium standards-setting body is developing standards. “The Commission will work with these groups to complete implementation of an easy-to-use, persistent, and effective Do Not Track system,” the report says.

Mobile – The FTC urges companies offering mobile services to work toward improved privacy protections, including disclosures. To that end, it will host a workshop on May 30, 2012 to address how mobile privacy disclosures can be short, effective, and accessible to consumers on small screens.
Read More »

Posted in Privacy and Security | Comments closed

Hill Tech Happenings, Week of March 26

March 27 – edited to reflect time change for Thursday’s hearing on public access.

Original Post:

March 27

Hearing:
The Technology and Innovation Subcommittee of the House Science, Space and Technology Committee will hold a hearing on the effect of federal policies on innovation.
10 a.m., 2318 Rayburn Building

March 28

Hearing:
The Communications and Technology Subcommittee of the House Energy and Commerce Committee will hold another hearing on cybersecurity and communications networks.
10 a.m., 2322 Rayburn Building

March 29

Hearing:
The Investigations and Oversight Committee of the House Science, Space and Technology Committee will hold a hearing on public access to federally funded research.
9:30 10 a.m., 2318 Rayburn Building

The Commerce, Manufacturing and Trade Subcommittee of the House Energy and Commerce Committee will hold a hearing on the interaction of online privacy and innovation.
10 a.m., 2123 Rayburn Building

Posted in Events | Comments closed

Hill Tech Happenings, Week of March 19

March 21

Hearing:
The Subcommittee on Crime, Terrorism, and Homeland Security of the House Judiciary Committee will hold a hearing on the REAL ID Act’s standards for driver’s licenses and identification cards.
10 a.m., 2141 Rayburn Building

The Technology, Information Policy Intergovernmental Affairs and Procurement Reform Subcommittee of the House Oversight and Government Reform Committee will hold a hearing on technology and the Freedom of Information Action (FOIA).

Posted in Events | Comments closed

Judea Pearl is the 2011 A.M. Turing Award Recipient

The Association for Computing Machinery has awarded the 2011 A.M. Turing Award, considered the equivalent of a Nobel Prize in Computing, to Judea Pearl, a Professor of Computer Science at the University of California, Los Angeles. Pearl is recognized for his work in transforming research in artificial intelligence (AI). From his Turing citation:

“Judea Pearl’s work has transformed artificial intelligence (AI) by creating a representational and computational foundation for the processing of information under uncertainty. Pearl’s work went beyond both the logic-based theoretical orientation of AI and its rule-based technology for expert systems.

“Equally significant is Pearl’s work on causal reasoning, where he developed a graph-based calculus of interventions that makes it possible to derive causal knowledge from the combined effects of actions and observations. This work has been transformative within AI and computer science, and has had major impact on allied disciplines of economics, philosophy, psychology, sociology, and statistics.”

The A.M. Turing Award is ACM’s most prestigious technical award. Each year the winner is invited to present a lecture at the ACM Awards Banquet, and thanks to the support of the Intel Corporation and Google, the winner receives a $250,000 prize.

2012 marks the centenary of Alan Turing’s birth, which ACM will celebrate in June. In addition to his contributions to code-breaking for the British during World War II, Turing is an important figure in modern computing, making advances in computer architecture, algorithms, formalization of computing, and artificial intelligence.

Posted in ACM/USACM News | Comments closed

USACM and SIGCHI Comment on Section 508 Refresh on Accessibility

The U.S. Access Board is revising the accessibility standards that require federal agencies to make electronic content and customer premises electronic equipment equally accessible to employees and members of the public with disabilities. USACM and the ACM Special Interest Group on Computer Human Interaction (SIGCHI) submitted comments to the Access Board on the proposed standards and guidelines.

This “refresh” of the Draft Information and Communications Technology (ICT) Standards and Guidelines will jointly update the accessibility requirements under Section 508 of the Rehabilitation Act and Section 255 of the Telecommunications Act. The current standards were last updated in 2000 and went into effect in 2001.

The Section 508/255 Refresh seeks, in part, to ensure and improve accessibility in light of innovative and emergent developments within the computer and technology industries, such as webcasts, mobile applications and devices, interactive kiosks, laptop computers, onscreen keyboards, and wireless assistive devices. The Refresh also seeks to foster increased compliance through increased ease of use and understanding of the standards by federal agencies, their contractors, and equipment manufacturers.

Read More »

Posted in Web Accessibility | Comments closed

Hill Tech Happenings, Week of March 5

March 6

Hearing:
The Science and Space Subcommittee of the Senate Commerce, Science and Transportation Committee will hold a hearing on research and development investments.
2:30 p.m., 253 Russell Building

March 7

Hearing:
The Communications and Technology Subcommittee of the House Energy and Commerce Committee will hold a hearing on communications networks and cybersecurity.
10 a.m., 2123 Rayburn Building

March 9

Meeting:
The President’s Council of Advisers on Science and Technology (PCAST) will meet.
10 a.m., Carnegie Endowment for International Peace, 1779 Massachusetts Avenue, NW

Posted in Events | Comments closed

USACM Comments on the Menlo Report

On Monday USACM submitted comments to the Department of Homeland Security (DHS) on the Menlo Report, which was issued in September 2011. The goal of the report was to extend ethical guidelines for research involving human subjects to computer and information security research. It based its framework on the Belmont Report for 1979, which developed similar guidelines for biomedical and behavioral sciences.

While this effort is a good start, as USACM noted in its comments, “developing directly usable guidance for researchers requires both broader and deeper
consideration of these issues” than can be found in the Menlo Report. We recommend that the DHS:

  • Collect and analyze data on current practices before taking action.
  • Evaluate the advantages and disadvantages of a variety of research ethics board models, including national and regional review bodies as well as IRBs.
  • Systematically consider related work and guidance from around the globe.
  • Include specialists in research ethics as part of the process.
  • The work DHS is doing is important, but is not on its own. As reflected in our comments from last September, the Department of Health and Human Services is working out revisions on its own human subjects research regulations, and DHS would benefit from exploring that effort and using it to inform its own work.

    We think the Menlo Report is necessary, research in computing and information technology needs to live up to its responsibilities concerning the human subjects affected by that research. USACM is willing and able to assist in furthering the work needed to do so.

    Posted in ACM/USACM News, Innovation, Privacy and Security | Comments closed

    Guest Post on Cybersecurity Legislation from Chris Bronk

    What follows is a guest post from Chris Bronk, Information Technology Policy Fellow at Rice University’s Baker Institute for Public Policy. He’s a new member of USACM, but the post reflects only his thoughts on the Cybersecurity Act of 2012, and not necessarily those of USACM.

    Digesting the New Senate Cybersecurity Legislation

    by Chris Bronk

    Senators Joe Lieberman, Susan Collins, Jay Rockefeller, and Diane Feinstein introduced another cybersecurity bill in the U.S. Senate on February 14. “The Cybersecurity Act of 2012,” or S.2105, is yet another attempt by the Senate to bring to a vote a major piece of bipartisan legislation on information and communications security. There have been several efforts to produce new law on this front, but debate has often mired on serious sticking points. The “Internet kill switch,” where the President would have the authority to close off the Internet, standing as perhaps the most rhetorically threatening of them. There is no kill switch in S.2105.

    Within S.2105, a broad set of issues was considered of interest to the federal government, the IT industry, and the operators of critical infrastructure. The bill lays out some pragmatic planks for determining responsibilities beyond the federal government, further bulking up national cyber security capabilities, and offering a roadmap for regulation of cyber security responsibility.

    Significantly, S.2105 emphasizes the Secretary of the Department of Homeland Security (DHS) as the lead official on cybersecurity matters, with the usual exceptions for agencies in the Department of Defense and Intelligence Community. DHS has gradually grown a capability in cybersecurity, and S.2105 would expand it, combining the functions of DHS’s National Cyber National Cyber Security Division, the Office of Emergency Communications, and the National Communications System into a single National Center for Cybersecurity and Communications. Presumably, this new center would operate in a manner similar to the Office of the Director of National Intelligence’s inter-agency function-specific centers, such as the National Counter Terrorism Center.

    Beyond the national center, S.2105 addresses another issue of great importance, the vulnerability of critical infrastructure – in both the public and private sectors – to cyber attack. The legislation lays out a process for designating critical infrastructure, assessing risks to it and “promulgat[ing] regulations to enhance the security of covered critical infrastructure against cyber risks.” This component will no doubt attract scrutiny as it assigns responsibilities and assesses liability – and the limitations thereof – with regard to the cybersecurity of critical infrastructure. (S.2105 also lays out standards on criticality, having to do with loss of life, service interruption, and severe economic damage among others).

    Other elements of the bill consider the expanded staffing needs and the peculiarities of clearing non-government employees to handle sensitive or classified information. It also considers cybersecurity information sharing issues, reform of the Federal Information Security Management Act (FISMA), and education and R&D initiatives.

    This bill may be able to clear previous obstacles and deliver to the President and the Department of Homeland Security the necessary authorities to move beyond piecemeal efforts in cyber security remedy and coordination. The Senate Homeland Security and Governmental Affairs Committee has already held a hearing on the bill, so there is interest in getting this legislation to a Senate vote sooner rather than later.

    Posted in Privacy and Security | Comments closed

    Hill Tech Happenings, Week of February 27

    February 29

    Hearing:
    The Investigations and Oversight Subcommittee of the House Science, Space and Technology Committee will hold a hearing on cybersecurity at the National Aeronautics and Space Administration.
    2 p.m., 2318 Rayburn Building

    Posted in Events | Comments closed

    Hill Tech Happenings, Week of February 13

    February 16

    Hearing:
    The Senate Homeland Security and Government Affairs Committee will hold a hearing on the Cybersecurity and Internet Freedom Act of 2012.
    2:30 p.m., 342 Dirksen Building

    February 17

    Hearing:
    The House Science, Space and Technology Committee will hold a hearing on science research and development funding for fiscal year 2013.
    9:30 a.m., 2318 Rayburn Building

    Posted in Events | Comments closed

    House Takes Another Crack at Updating NITRD

    Yesterday the House Science, Space and Technology Committee approved legislation updating the High Performance Computing Act of 1991. That law, among other things, established the Networking and Information Technology Research and Development program (NITRD). NITRD was established to coordinate federal research and development in computing, and as computing knowledge and technology change, the law should try to keep up.

    The House legislation aims to do just that, adding language to the existing law concerning cloud computing and cyber-physical systems, revising language concerning strategic planning for the program and its National Coordination Office and further encourages the National Science Foundation to use its programs to increase education in cybersecurity issues and to increase participation in the field by underrepresented groups.

    The bill, H.R. 3834, now moves to the full House for a vote.

    Posted in Education and Workforce, Innovation | Comments closed

    Hill Tech Happenings, Week of February 6

    February 7

    Markup:
    The House Science, Space and Technology Committee will review pending legislation, including a bill to amend the High Performance Computing Act of 1991.
    10 a.m., 2318 Rayburn Building

    February 8

    Hearing:
    The Communications and Technology Subcommittee of the House Energy and Commerce Committee will hold a hearing on the cybersecurity of communications networks.
    9:30 a.m., 2322 Rayburn Building

    Posted in Events | Comments closed

    Hill Tech Happenings, Week of January 30

    February 1

    Markup:
    The Subcommittee on Cybersecurity, Infrastructure Protection and Security Technologies of the House Homeland Security Committee will mark up legislation on cybersecurity and information sharing.
    10 a.m., 311 Cannon Building

    Posted in Events | Comments closed

    USACM Statement on SOPA and PROTECT IP

    This week, as opposing views on the Preventing Real Online Threats to Economic Creativity and Theft of Intellectual Property Act of 2011 (S. 968, the PROTECT IP Act, or PIPA) and the Stop Online Piracy Act (SOPA – H.R. 3261), come increasingly increasingly into focus—Wikipedia and other opposing organizations stage a blackout, the Motion Picture Association of America and News Corp. state their support of the bills, and the White House calls for a back-to-the-drawing board approach—it is important that we take a look at the facts surrounding these pieces of legislation and the reality that would result should these bills become law in their current draft form. While there are several areas of concerns with these bills, USACM is in a position to comment specifically on the technological aspects of these proposed pieces of legislation. Those aspects are the focus of USACM’s efforts in this area.

    With a membership whose professional output relies on sound, enforceable intellectual property rights, USACM supports reasonable efforts to address criminal violations of intellectual property rights, but the technological mandates required in both SOPA and PIPA cause grave concern. In letters submitted this week to the Senate and House Judiciary Committees, USACM outlines our analyses the technological impact of both PIPA and SOPA, concluding that the bills’ approach to disrupting rogue sites by removing them from indexing and search sites will prove problematic and ineffective.

    Furthermore, the portions of the legislation dealing with DNS (Domain Name System), would undermine years of sound technical work by the international community as well as inhibit substantial progress made by many parties, including the federal government, to address security flaws in the existing DNS system. Any actions that interfere with or weaken any aspect of DNSSEC (DNS Security Extensions), a foundation for Internet security, should be viewed with grave concern. That is why USACM is encouraged by recent statements from the sponsors of SOPA and PIPA, Rep. Lamar Smith and Senator Patrick Leahy, that the provisions on DNS blocking will be reconsidered, if not removed from the bills.
    Read More »

    Posted in ACM/USACM News, Intellectual Property, Privacy and Security | Comments closed

    Hill Tech Happenings, Week of December 12

    December 14

    Hearing:
    The Subcommittee on Communications and Technology of the House Energy and Commerce Committee will hold a hearing on ICANN’s top-level domain program.
    9 a.m., 2123 Rayburn Building

    Posted in Events | Comments closed

    Hill Tech Happenings, Week of December 5

    December 6

    Hearing:
    The Cybersecurity, Infrastructure Protection and Security Technologies Subcommittee of the House Homeland Security Committee will hold a hearing on a draft legislative proposal on cybersecurity.
    10 a.m., 311 Cannon Building

    Posted in Events | Comments closed

    Policy Highlights from Communications of the ACM – September 2011 (Vol. 54, No. 9)

    Below is a list of items with policy relevance from the September issue of Communications of the ACM. As always, much of the material in CACM is premium content, and free content one month may slip behind a pay wall the next. You need to be a member of ACM or a subscriber to CACM to access premium content online.

    News: Society
    Remaking American Medicine by Neil Savage
    A review of recent reports on health information technology from the President’s Council of Advisers on Science and Technology.

    Viewpoint: Law and Technology
    Remix Nation by Rebecca Tushnet
    A discussion of how the anti-circumvention provisions of the Digital Millennium Copyright Act influence the practice of fair use.

    Emerging Markets
    Corporate Social Responsibility and Global IT Outsourcing by Ron Babin, Steve Briggs, and Brian Nicholson
    The article summarizes the increasing participation in corporate social responsibility projects by companies involved in global information technology outsourcing.

    Contributed Articles
    Protecting Users of the Cyber Commons by Stephen Lukasik
    A discussion of the need for both top-down and bottom-up schemes for improving cybersecurity.

    Posted in ACM/USACM News | Comments closed

    USACM Encourages Deficit Reduction Committee to Remember the Value of Computing

    The Joint Committee on Deficit Reduction is the formal name of the “Supercommittee” that is supposed to recommend at least $1.2 trillion in deficit reduction over the next 10 years. USACM sent a letter today to the supercommittee that notes the value of computing to the nation, a value that needs consistent investment in order to contribute to the nation’s recovery.

    The letter notes how information technology and computing have contributed to U.S. economic prosperity over the last few decades. Besides providing a critical boost to the nation’s economy, computing and information technology also help the country maintain and improve its security and safety. This investment should be made in both education and research.

    Recognizing the challenges facing the Committee, the letter argues for not injuring investments in innovation (including computing) in the cuts that it recommends to the full Congress. The final vote must take place in Congress by December 23, so time is running short.

    Posted in ACM/USACM News, Innovation | Comments closed

    Hill Tech Happenings, Week of November 14

    November 15

    Hearing:
    The Subcommittee on Crime, Terrorism and Homeland Security of the House Judiciary Committee will hold a hearing on cybersecurity.
    10 a.m., 2141 Rayburn Building

    November 16

    Hearing:
    The House Judiciary Committee will hold a hearing on the Stop Online Piracy Act.
    10 a.m., 2141 Rayburn Building

    Posted in Events | Comments closed

    Policy Highlights from Communications of the ACM – August 2011 (Vol. 54, No. 8)

    Below is a list of items with policy relevance from the August issue of Communications of the ACM. As always, much of the material in CACM is premium content, and free content one month may slip behind a pay wall the next. You need to be a member of ACM or a subscriber to CACM to access premium content online.

    News: Technology
    Supercomputing’s Exaflop Target by Tom Geller
    Geller recounts the current state of supercomputing activity, and the political implications of winning or losing the race for the fastest supercomputer.

    Viewpoints: Privacy and Security
    As Simple As Possible – But Not More So by S.M. Bellovin, S.O. Bradner, W. Diffie, S. Landau, and J. Rexford
    The authors review the U.S. government’s EINSTEIN program for detecting and preventing intrusions on computer networks, discussing the challenges in implementing such a system in the private sector.

    Posted in ACM/USACM News | Comments closed

    Hill Tech Happenings, Week of October 31

    UPDATE (November 2 added):
    November 2

    Markup:
    The Senate Commerce, Science and Transportation Committee will review pending legislation. A bill on data security is scheduled for this session.
    2:30 p.m.,
    November 3

    Hearing:
    The Research and Science Education Subcommittee of the House Science, Space and Technology Committee will hold a hearing on STEM (science, technology, engineering, and mathematics) education and employment.
    10 a.m., 2318 Rayburn Building

    Posted in Events | Comments closed

    Computing Researchers Weigh in on Changes to Human Subjects Research Regulations

    The Department of Heath and Human Services is planning to revise what it calls the Common Rule – the regulations overseeing federally funded research involving human subjects. These regulations were last updated in the early 1990s, so the proposed changes try to catch up with the advances in research and in computing since that time.

    The proposed changes are in two major categories. The first is a series of revisions to procedures for Institutional Review Boards (IRBs) and the types of research that must undergo various levels of review. The other major category is in data and information protection. With the changes in computing storage and the increasing ease of re-identifying information that was stripped of identifying characteristics, increased data security measures were needed.

    In connection with ACM’s Special Interest Group on Computer-Human Interaction (SIGCHI) and the Institute of Electrical and Electronics Engineers – USA (IEEE-USA), USACM submitted comments in response to the proposed rules. Some highlights from the recommendations in our comments:
    Read More »

    Posted in ACM/USACM News, Innovation, Privacy and Security | Comments closed

    Hill Tech Happenings, Week of October 11

    October 12

    Hearing
    The Research and Science Education Subcommittee of the House Science, Space and Technology Committee will hold a hearing on education approaches in science, technology, engineering and mathematics subjects.
    10 a.m., 2318 Rayburn Building

    Posted in Events | Comments closed

    Growing Trust – Cybersecurity and the Internet and Information Innovation Sector

    In August USACM submitted comments on the draft green paper “Cybersecurity, Innovation and the Internet Economy” issued by the Internet Policy Task Force of the Department of Commerce. This work by the Task Force is an important recognition of how cybersecurity and privacy can support each other as they help ensure that the online environment benefits consumers and commercial interests alike.

    An important theme of the green paper is trust – how risks to cybersecurity threaten it and how maintaining this trust is critical to a robust Internet and Information Innovation Sector (called I3S in the paper). While maintaining that trust will be a challenge, USACM’s comments make recommendations for policies to help us get there.

      • Increase software developer accountability for the products they produce and market, thus saving businesses from ever having to make the difficult decision between innovation and market share and security.
      • Create comprehensive web security and web application standards, as well as reasonably constrained data retention policies and practices, which will be vital as more businesses place data within cloud computing environments to quickly implement innovative business processes and minimize infrastructure and security costs.
      • Increase research in web application and services security that seeks, among other things, new approaches to accommodate increased wireless access via mobile devices.
      • Widespread security education for both businesses and customers to strengthen cybersecurity within the I3S. This can be achieved with the use of practical resources and processes to secure businesses’ web applications and services and by providing usable guidance to consumers to help them become more security conscious.
    Posted in ACM/USACM News, Privacy and Security | Comments closed

    Hill Tech Happenings, Week of October 3

    October 4

    The House Select Intelligence Committee will hold a hearing on cyber threats.
    10 a.m., HVC-210, Capitol Visitor Center

    October 6

    Hearing:
    The Cybersecurity, Infrastructure Protection and Security Technologies Subcommittee of the House Homeland Security Committee will hold a hearing on cloud computing.
    10 a.m., 311 Cannon Building

    Posted in Events | Comments closed

    Hill Tech Happenings, Week of September 26

    Budget issues should dominate what little time Congress intends to spend in town this week.

    September 26

    Hearing:
    The House Science, Space and Technology Committee will hold a field hearing on science, technology, engineering and mathematics education.
    10 a.m., Sullivan Performing Arts Center, Texarkana, Texas.

    Posted in Events | Comments closed

    Computer Science Education Act Introduced in Both Houses

    Yesterday, Senator Bob Casey (D-Pennsylvania) and Representative Jared Polis (D-Colorado) introduced legislation to strengthen computer science education in the United States. Called the Computer Science Education Act (CSEA), the bill focuses on K-12 education. Here’s a summary of the key objectives of the bill, taken from the ACM press release:

    • Fund planning grants for states to work with stakeholders to assess their computer science offerings in K-12 and develop concrete steps to strengthen them
    • Fund implementation grants for states, in partnership with local school districts and institutions of higher education, to carry out state plans by: developing state computer science standards, curriculum, and assessments; improving access to underserved populations; building professional development and teacher certification programs; creating on-line courses; and, ensuring computer science offerings are an integral part of the curriculum
    • Establish a blue-ribbon commission to review the state of computer science education nationwide, and bring states together to address the computer science teacher certification crisis
    • Establish computer science teacher preparation programs at institutions of higher education
    • Create an independent, rigorous evaluation of state programs funded under this Act with results reported to Congress and the Administration

    One of the intended purposes for this legislation is to help stop the slide in participation in computer science courses at the K-12 level. As ACM CEO John White notes, both the number of introductory computer science courses and the participants in computing Advanced Placement exams have dropped significantly since 2005. Certainly other things will have to happen to help reverse this trend, but passing the CSEA would make it easier, and demonstrate Congressional support for keeping Americans engaged with an important field for the future.

    Posted in ACM/USACM News, Education and Workforce | Comments closed

    ACM Education Policy Chair Testifies to Congress on IT Research and Development

    Dr. Robert Schnabel, Dean of the School of Informatics at the University of Indiana and Chair of ACM’s Education Policy Committee, testified before the House Research and Science Education Subcommittee on Thursday. The hearing focused on the Networking and Information Technology Research and Development program (NITRD), a U.S. government program that coordinates the various federal efforts in research and development in computer science. You can watch the hearing and read witness testimony via the House Science, Space and Technology Committee’s website. We also have Dr. Schnabel’s testimony on our website.

    Consistent with the focus of ACM’s Education Policy Committee on K-12 computer science education, Schnabel’s testimony emphasized the need to boost that area of education to improve the future of hiring in the field. From the ACM press release:

    “If we fail to address the issues facing K-12 computer science education, students will have little exposure or familiarity with this critical discipline or its concepts before beginning higher education. As a result, the IT workforce will continue to lack the capacity needed to meet the nation’s growing IT needs,” he said. “NITRD and the National Coordinating Office (NCO) can play a key role in addressing the obstacles impeding K-12 computer science education. As the committee works to reauthorize NITRD, we encourage it to help our nation address this problem.”

    The other witnesses included computer scientists Ed Lazowska from the University of Washington, Robert Sproull, recently retired head of Oracle Labs, and George Strawn, Director of the NITRD Coordination Office. The House Science, Space and Technology Committee developed legislation for NITRD in the previous Congress, and may do again in this Congress. Whether it will get further than the House floor is an open question.

    Posted in ACM/USACM News, Education and Workforce | Comments closed

    Hill Tech Happenings, Week of September 19

    September 21

    Hearing:

    The Technology and Innovation Subcommittee of the House Science, Space and Technology Committee will hold a hearing on Cloud Computing.
    10 a.m., 2318 Rayburn Building

    The Research and Science Education Subcommittee of the House Science, Space and Technology Committee will hold a hearing on the Networking and Information Technology Research and Development program. ACM Education Policy Committee Chair Bobby Schnabel of Indiana University will testify.
    2 p.m., 2318 Rayburn Building

    The Senate Judiciary Committee will hold a hearing on oversight of Google.
    2 p.m., 226 Dirksen Building

    Markup:
    The Senate Commerce, Science and Transportation will revise and approve pending legislation, including a data security bill.
    2:30 p.m., 253 Russell Building

    September 22

    Markup:
    The Senate Judiciary Committee will markup pending legislation, continuing the work on data security bills started last week.
    10 a.m., 226 Dirksen Building

    Posted in Events | Comments closed

    Deconstruct the iPad with the Task Force on American Innovation

    Those in the Washington, D.C. area next Wednesday, September 21, may want to attend a Congressional briefing hosted by the Task Force on American Innovation (ACM and USACM have participated in Task Force efforts in the past). The briefing is also hosted by Representatives Hultgren (Illinois), McCaul (Texas), and Quayle (Arizona).

    Titled Deconstructing the iPad, the event is a panel discussion highlighting how federally funded research supports technological innovations. The speakers are:

    Moderator
    Luis von Ahn, Carnegie Mellon University; founder of ReCAPTCHA

    Guest Speakers
    Martin Izzard, Texas Instruments
    William Phillips, Nobel Laureate; National Institute of Standards and Technology; University of Maryland
    Benjamin Bederson, University of Maryland; Zumobi, Inc.

    The briefing will take place on Wednesday, September 21, in room 2325 of the Rayburn House Office Building in Washington. Please RSVP to Jodi Lieberman at lieberman@aps.org

    Posted in Events, Innovation | Comments closed

    Hill Tech Happenings, Week of September 12

    September 14

    Hearing: The Financial Institutions and Consumer Credit Subcommittee of the House Financial Services Committee will hold a hearing on cybercrime and the financial sector.
    10 a.m., 2128 Rayburn Building

    September 15

    Hearing:
    The Commerce, Manufacturing and Trade Subcommittee of the House Energy and Commerce Committee will hold a hearing on the U.S. impacts of European Internet privacy regulations.
    9:30 a.m., 2322 Rayburn Building

    Markup:
    The Senate Judiciary Committee will review pending legislation and nominations, including bills involving data security.
    10 a.m., 226 Dirksen Building

    Posted in Events | Comments closed

    Hill Tech Happenings, Week of September 6

    Congress has returned from its August recess. The Fiscal Year 2012 budget should be high on the agenda, as that year starts October 1.

    September 7

    Hearing
    The Senate Judiciary Committee will hold a hearing to discuss updates to the Computer Fraud and Abuse Act.
    10 a.m., 226 Dirksen Building

    Posted in Events | Comments closed

    Policy Highlights from Communications of the ACM – July 2011 (Vol. 54, No. 7)

    Below is a list of items with policy relevance from the July issue of Communications of the ACM. As always, much of the material in CACM is premium content, and free content one month may slip behind a pay wall the next. You need to be a member of ACM or a subscriber to CACM to access premium content online.

    News: Technology
    Automotive Autonomy by Alex Wright
    A description of recent advances in automating automobiles, focusing on efforts support by Google and the European Union.

    Viewpoint: Legally Speaking
    Too Many Copyrights? by Pamela Samuelson
    The author describes the current lack of copyright registration requirements and whether reinstating them makes sense.
    Read More »

    Posted in ACM/USACM News | Comments closed

    USACM Notes Concerns with Proposed SSA Online Authentication Process

    Like many federal agencies, the Social Security Administration (SSA) is trying to provide more services in a time of limited resources. As part of its efforts to better serve the public, the SSA is working on an online authentication system to help ensure that the people it is interacting with online are indeed the people they claim to be, and qualified for the services they are requesting.

    To address the first part, the SSA submitted a notice of information collection that is connected to online authentication. The intention is to issue a User ID for everyone seeking to access SSA services online, and several ways to authenticate that identity. (People will still be able to access services in person or over the phone.)

    USACM responded to the notice with some concerns over the proposed authentication system. While USACM is encouraged by additional attention to authentication for online services, the proposed system is insufficient.
    Read More »

    Posted in Privacy and Security | Comments closed

    Policy Highlights from Communications of the ACM – June 2011 (Vol. 54, No. 6)

    Below is a list of items with policy relevance from the June issue of Communications of the ACM. As always, much of the material in CACM is premium content, and free content one month may slip behind a pay wall the next. You need to be a member of ACM or a subscriber to CACM to access premium content online.

    Column: Privacy and Security
    Identity Management and Privacy: A Rare Opportunity to Get it Right by Ari Shapiro
    The Senior Internet Policy Advisor at the National Institute of Standards and Technology discusses how the proposed National Strategy for Trusted Identities in Cyberspace offers a way to protect privacy, assure identities, and maintain the benefits of the Internet.

    Practice
    Does Deterrence Work in Reducing Information Security Policy Abuse by Employees? by Qing Hu, Zhengchuan Xu, Tamara Dinev and Hong Ling
    A review of the authors research in the relationships between security policies and behavior in corporate settings, with an emphasis on how effective deterrence is in reducing violations.

    Posted in ACM/USACM News | Comments closed

    USACM Summer Recap: Comments on NSTIC Governance

    Often things slow down in the summer, but that’s not been the case for USACM this year. We’ve been busy commenting on various government proposals related to computing and will post about that work over the next few days.

    The National Strategy for Trusted Identities in Cyberspace (NSTIC) is a government-wide effort to work with the private sector to provide identity verification options for consumers and providers. This is intended to maintain or improve confidence in online transactions. National Institute of Standards and Technology (NIST) staff wrote about the program in a recent issue of CACM (subscription required), and USACM commented on an NSTIC draft in 2009. There is a targeted implementation date of 2016. While that is far off, there is much work to do, starting with how to manage NSTIC.

    NIST issued a notice of inquiry on NSTIC governance in early June, and USACM responded to questions on how this strategy should be guided moving forward. Our comments focused on the need for good governance to ensure trust in NSTIC – something critical to its effective function. Besides recommending that relevant technical and international experience be included on any NSTIC governance structure, our comments argued for ensuring that vacancies be filled promptly, and that NSTIC staff should review several existing technical bodies for insights on how to develop a governance structure.

    Preliminary efforts on setting up NSTIC continue. With two workshops held so far this summer and another expected soon, there should be additional opportunities for public comment.

    Posted in ACM/USACM News, Privacy and Security | Comments closed

    Policy Highlights from Communications of the ACM – May 2011 (Vol. 54, No. 5)

    Below is a list of items with policy relevance from the May issue of Communications of the ACM. As always, much of the material in CACM is premium content, and free content one month may slip behind a pay wall the next. You need to be a member of ACM or a subscriber to CACM to access premium content online.

    Letters
    Technology Has Social Consequences by Moshe Y. Vardi
    CACM’s editor describes how changes in technology have affected norms and practices around reviewers and conference program committee members.

    News: Society
    Data Optimization in Developing Nations by Leah Hoffman
    A sketch of how data collection and analysis can be utilized for issues in the developing world.

    Viewpoint: Economic and Business Dimensions
    Online Advertising, Behavioral Targeting, and Privacy by Avi Goldfarb and Catherine E. Tucker
    A review of recent surveys on the impact of European Union regulations on targeted online advertising.
    Read More »

    Posted in ACM/USACM News | Comments closed

    Former Microsoft Executive to Replace Kundra as Federal CIO

    Shortly before Vivek Kundra’s scheduled departure from the position of federal Chief Information Officer, the White House has named his replacement.

    Steven VanRoekel moves into the position from the U.S. Agency for International Development, where he was its Executive Director of Citizen and Organizational Engagement. He worked for the Federal Communications Commission (FCC) before that, serving as managing director. Part of his responsibilities at the FCC included implementing many of the federal IT initiatives that Kundra initiated, including consolidation of data centers and moving services to cloud computing where practical. Prior to federal service VanRoekel worked at Microsoft for 15 years, including serving as Senior Director for the Windows Server and Tools Division.

    USACM has been most engaged with the CIO’s work through Data.gov and the efforts to put more data available online in usable formats. This work is far from complete, and we expect to be engaged with at least this aspect of Mr. VanRoekel’s work going forward.

    Posted in Digital Government | Comments closed

    Hill Tech Happenings, Week of August 1

    Yes, there is more to Washington right now than negotiations and voting on the results.

    August 2
    Briefing:

    The Strategic Forces Subcommittee of the Senate Armed Services Committee will receive a closed briefing on cybersecurity.
    2:30 p.m., Capitol Visitors Center

    August 3

    Hearing:
    House Science, Space and Technology Committee will hold a hearing on the possible impacts of a mobile broadband network on scientific research activities.
    10 a.m., 2318 Rayburn Building

    The Senate Judiciary Committee will hold a hearing on updating the Computer Fraud and Abuse Act.
    10 a.m., 226 Dirksen Building
    Read More »

    Posted in Events | Comments closed

    Hill Tech Happenings, Week of July 25

    July 26

    Hearing:

    The Oversight and Investigations Subcommittee of the House Energy and Commerce Committee will hold a hearing on cybersecurity and critical infrastructure.
    11 a.m., 2322 Rayburn Building

    Posted in Events | Comments closed

    Hill Tech Happenings, Week of July 11

    July 11

    Meeting:
    The Data Privacy and Integrity Advisory Committee of the Department of Homeland Security will meet.
    10 a.m., 111 Massachusetts Avenue, N.W., Washington, D.C.

    July 13

    Meeting:
    The Information Security and Privacy Advisory Board will meet (continues through July 15)
    8 a.m., Homewood Suites, 1475 Massachusetts Avenue, N.W., Washington, D.C.

    July 14

    Meeting:
    The Information Security and Privacy Advisory Board meeting continues.
    8 a.m., Homewood Suites, 1475 Massachusetts Avenue, N.W., Washington, D.C.
    Read More »

    Posted in Events | Comments closed

    Policy Highlights from Communications of the ACM – April 2011 (Vol. 54, No. 4)

    Below is a list of items with policy relevance from the April issue of Communications of the ACM. As always, much of the material in CACM is premium content, and free content one month may slip behind a pay wall the next. You need to be a member of ACM or a subscriber to CACM to access premium content online.

    Letters
    Educating Computing’s Next Generation by Robert B. Schnabel
    The chair of ACM’s Education Policy Committee describes the charge and activities of the Committee.

    News: Society
    Social Games, Virtual Goods by Samuel Greengard
    A brief update on how online games and the currency used in those games can have physical world impacts.

    News: Academia
    British Computer Scientists Reboot by Sarah Underwood
    How one computer science department in a U.K. university is struggling with budget cuts and poor research rankings.
    Read More »

    Posted in ACM/USACM News | Comments closed

    Hill Tech Happenings, Week of July 4

    July 7

    Hearing:
    The House Oversight and Government Reform Committee will hold a hearing on cybersecurity threats and threat assessment.

    Posted in Events | Comments closed

    Hill Tech Happenings, Week of June 27

    June 29

    Hearing:
    The Senate Commerce, Science and Transportation Committee will hold a hearing on consumer data privacy.
    10 a.m., 253 Russell Building

    The House Financial Services Committee will hold a field hearing on cybercrime and financial institutions.
    2 p.m., National Computer Forensics Institute, 2020 Valleydale Rd. Hoover, Ala.

    Posted in Events | Comments closed

    House Judiciary Committee Approves Patent Reform Bill; Full House May Consider it Soon

    Patent reform is one of many issues that has been stalled in the halls of Congress over the last several years. However, this particular effort may get somewhere soon. H.R. 1249, the America Invents Act, was approved by the House Judiciary Committee and reported to the full House for consideration and a vote. The White House has weighed in with its support, and Senate Judiciary Committee Chairman Leahy welcomed the progress.

    However, a compromise that brought the bill to the House floor may jeopardize the chances of its passage. The specific issue that brought the compromise concerns fee recovery. At the moment, the U.S. Patent and Trademark Office (USPTO) cannot retain all of the money it receives through application and other fees. The America Invents Act initially proposed allowing USPTO to retain all of this money. However, House appropriators objected to that proposal, and agreed to consider the bill only if so-called excess funds where set aside for USPTO, subject to House appropriations. The Patent office is chronically understaffed, so the additional money could be put to good use. However, with the current budget climate, requiring excess funds to be routed back to the office via appropriations runs the risk of that money never getting to USPTO.

    This compromise has prompted some additional resistance to the bill, which has never enjoyed universal support from either party. Read More »

    Posted in Intellectual Property | Comments closed

    Policy Highlights from Communications of the ACM – March 2011 (Vol. 54, No. 3)

    Below is a list of items with policy relevance from the March issue of Communications of the ACM. As always, much of the material in CACM is premium content, and free content one month may slip behind a pay wall the next. You need to be a member of ACM or a subscriber to CACM to access premium content online.

    News: Research and Development

    Evaluating Government Funding by Tom Geller
    Article reviews the December 2010 report from the President’s Council of Advisers on Science and Technology on federal investments in networking and information technology research.

    News: In Memoriam
    Gary Chapman, Technologist: 1952-2010
    A remembrance of Chapman, who served as the first Executive Director of Computer Professionals for Social Responsibility.

    Viewpoints: Legally Speaking
    Do You Own the Software You Buy? by Pamela Samuelson
    Samuelson reviews recent court decisions and how they affect the resale of software.

    Viewpoints: Computing Ethics
    Surrounded by Machines by Kenneth D. Pimple
    Review of a recent workshop on the ethics of pervasive and autonomous information technology.
    Read More »

    Posted in ACM/USACM News | Comments closed

    Hill Tech Happenings, Week of June 20

    Cybersecurity appears to be the word for committees this week.

    June 21

    Hearing:

    The Senate Banking, Housing and Urban Affairs Committee will hold a hearing on cybersecurity in the financial sector.
    10 a.m., 538 Dirksen Building

    The Subcommittee on Crime and Terrorism of the Senate Judiciary Committee will hold a hearing on the administration’s cybersecurity proposals.
    2:30 p.m., 226 Dirksen Building

    June 22

    Hearing:

    The Senate Judiciary Committee will hold a hearing on enforcing intellectual property laws.
    10 a.m., 226 Dirksen Building

    June 24

    Hearing:

    The Cybersecurity, Infrastructure Protection and Security Technologies Subcommittee of the House Homeland Security Committee will hold a hearing on the administration’s cybersecurity proposals.
    10 a.m., 311 Cannon Building

    Posted in Events | Comments closed

    Hill Tech Happenings, Week of June 13

    June 14

    Conference:

    The Computers, Freedom and Privacy Conference takes place (continues through June 16)
    Georgetown University Law Center, 600 New Jersey Avenue, NW, Washington, D.C.

    June 15

    Hearing:

    The Commerce, Trade and Manufacturing subcommittee of the House Energy and Commerce Committee will hold a hearing on proposed consumer data protection legislation.
    10 a.m., 2322 Rayburn Building

    June 16

    Hearing:

    The Oversight subcommittee of the Committee on House Administration will hold a hearing on information delivery in the House.
    10 a.m., 1310 Longworth Building

    Posted in Events | Comments closed

    Hill Tech Happenings, Week of May 31

    UPDATE (June 1) – The House Oversight and Government Reform Committee hearing scheduled for June 1 has been postponed.

    While the Senate is not in session this week, the House is.

    June 1

    Hearing:

    House Oversight and Government Reform Committee will hold a hearing on cybersecurity.
    9:30 a.m., 2154 Rayburn Building

    The Intellectual Property, Competition and the Internet Subcommittee of the House Judiciary Committee will hold a hearing on online commerce and intellectual property.
    1:30 2:00 p.m., 2141 Rayburn Building

    June 2

    Hearing:

    The Commerce, Manufacturing and Trade Subcommittee of the House Energy and Commerce Committee will hold a hearing on the Sony and Epsilon data breaches.
    9 a.m., 2123 Rayburn Building

    Posted in Events | Comments closed

    Hill Tech Happenings, Week of May 23

    May 23

    Hearing:

    The Senate Homeland Security and Government Affairs Committee will hold a hearing on the Administration’s cybersecurity proposal.
    10:30 a.m., 342 Dirksen Building

    May 25

    Hearing:

    The Intellectual Property, Competition and the Internet Subcommittee and the Crime, Terrorism and Homeland Security Subcommittee of the House Judiciary Committee will hold a joint hearing on cybersecurity
    10 a.m., 2141 Rayburn Building

    The Subcommittee on National Security, Homeland Defense and Foreign Operations of the House Oversight and Government Reform Committee will hold a hearing on cybersecurity threat assessment.
    1:30 p.m., 2154 Rayburn Building
    Read More »

    Posted in Events | Comments closed

    Hill Tech Happenings, Week of May 16

    May 19

    Meeting:
    The President’s Council of Advisors on Science and Technology will meet. The meeting will be webcast.
    9 a.m., Marriott Metro Center, 775 12th Street NW

    Hearing:
    The Senate Commerce, Science and Transportation Committee will hold a hearing on consumer protection and privacy in mobile devices.
    10 a.m., 253 Russell Building

    Meeting:
    The Department of Homeland Security’s Data Privacy and Integrity Advisory Committee will meet via teleconference. Open to the public, but the number of lines is limited.
    11 a.m.

    Posted in Events | Comments closed

    Has the Cybersecurity Logjam Broke?

    Congress has been making noise about passing comprehensive cybersecurity legislation for most of the last two years, prompted in part by the Obama Administration’s cyberspace policy review in 2009. Nearly two years later, the Administration has released a legislative proposal in cybersecurity that may help push legislation further along. Depending on how you count, there are nearly 50 different measures pending in Congress dealing with some aspect of cybersecurity, so a push should help.

    The full Administration proposal is available online, as well as section-by-section analysis and a fact sheet. You can also look at specific parts of the proposal (see the May 12, 2011 entries), which are listed below:

  • Changes in criminal penalties for several computer-related or computer-enabled offenses
  • Data Breach Notification requirements
  • Codifies Department of Homeland Security responsibilities for civilian cybersecurity
  • Sets cybersecurity requirements for critical infrastructure systems
  • Updates the Federal Information Security Management Act
  • Some of these topics have been covered in current cybersecurity legislation or bills that were introduced in previous sessions of Congress. So in many cases, there isn’t a disagreement on whether or not a certain law is necessary, but there may be disagreement on exactly how that law should be written. And while the Administration has introduced this legislation in one large package, there is no way of knowing exactly how the package will be handled in Congress. The Senate has a placeholder bill ready to handle a single cybersecurity bill, but it’s just as possible that Congress will seek to move quickly on those bills that already have broad support ahead of new proposals or other proposals that still require negotiation.

    Posted in Privacy and Security | Comments closed

    Hill Tech Happenings, Week of May 9

    May 12

    Hearing:

    The Senate Commerce, Science and Transportation Committee will hold a hearing on the economic impacts of cyber attacks (previously scheduled for late March).
    10 a.m., 253 Russell Building

    Posted in Events | Comments closed

    Sony-Prompted Hearing Features Testimony from USACM Chair

    Prompted by the massive data breaches of Sony’s networks, the Subcommittee on Commerce, Manufacturing and Trade of the House Energy and Commerce Committee held a hearing May 3 on data theft and its effects on consumers. One of the witnesses was USACM Chair Eugene Spafford. The committee has a webpage on the hearing, which includes links to an archived webcast and the written testimony of all four witnesses. You can also read Dr. Spafford’s testimony and the USACM press release covering it.

    While Sony and Epsilon (an email marketing company that recently suffered its own data breach) were invited to testify, they declined to appear. This presented an excellent political opportunity for the members of Congress at the hearing, and the subcommittee chair suggested in press reports she may again invite Sony to testify. The witnesses that attended were from two government agencies heavily involved in data breach prevention and investigation – the Federal Trade Commission and the Secret Service, and legal and technical experts that provided useful context to both the recent data breaches, and the longer-term problems in this area (publicly reported data breaches have affected at least 600 million records since 2005).

    The Energy and Commerce Committee has worked on data privacy and data breach legislation in the past, and may try to use the recent breaches to push their legislation further through Congress than they have been able to before. The witnesses all supported some form of data privacy legislation to address not only data breaches and notification, but also effective information security practices. The large majority of these breaches could be mitigated by better implementation of best practices in this area. Many of the questions and answers reflected the long work of this committee in the area, though their questions suggested that companies have not been effective in communicating why they may not be able to immediately notify consumers in the event of a breach.

    Posted in ACM/USACM News, Privacy and Security | Comments closed

    USACM Chair to Testify on Data Breaches

    Prompted by the recent data breaches of the PlayStation Network and the email marketing company Epsilon, the Commerce, Manufacturing and Trade Subcommittee of the House Energy and Commerce Committee will hold a hearing this Wednesday, May 4, on data breaches. They have invited USACM Chair Eugene Spafford to testify. His testimony will focus on the technical aspects of holding and managing consumer data securely, and the threats against such information. The hearing will be available online, via the House Energy and Commerce Committee website. A link should be available by the time of the hearing, 9:30 a.m. Eastern on Wednesday. While the Subcommittee has inquired with both Sony (the manufacturer of PlayStation) and Epsilon about their breaches, they are currently not going to attend Wednesdays hearing.

    Posted in ACM/USACM News, Events, Privacy and Security | Comments closed

    Hill Tech Happenings, Week of May 2

    May 3

    Hearing:

    The House Oversight and Government Reform Committee will hold a hearing on updating the Presidential Records Act to better handle electronic records.
    9:30 a.m., 2154 Rayburn Building

    May 4

    Hearing:

    The Subcommittee on Commerce, Manufacturing, and Trade of the House Energy and Commerce Committee will hold a hearing on the threat of data thefts to American consumers. Recent Playstation and Epsilon breaches are likely to be a focus of the hearing.
    9:30 a.m., 2322 Rayburn Building

    The Subcommittee on Intellectual Property, Competition and the Internet of the House Judiciary Committee will hold a hearing on Internet domain name oversight.
    10 a.m., 2141 Rayburn Building

    May 5

    Hearing:

    The Senate Energy and Natural Resources Committee will hold a hearing on the economic impact of cyber attacks. The hearing will focus on a discussion draft of cybersecurity legislation focused on the power and electricity infrastructure.
    9:30 a.m., 366 Dirksen Building

    The Subcommittee on Intellectual Property, Competition and the Internet of the House Judiciary Committee will hold a hearing on Internet competition.
    10 a.m., 2141 Rayburn Building

    Posted in Events | Comments closed

    Policy Highlights from Communications of the ACM – February 2011 (Vol. 54, No. 2)

    Below is a list of items with policy relevance from the February issue of Communications of the ACM. As always, much of the material in CACM is premium content, and free content one month may slip behind a pay wall the next. You need to be a member of ACM or a subscriber to CACM to access premium content online.

    News: Technology
    Chipping Away at Greenhouse Gases, by Gregory Goth
    Review of processor algorithms that could lead to significant cost and energy savings. Also considered are the new research questions posed by the new technologies.

    News: Society
    Following the Crowd by Samuel Greengard
    Discussion of crowdsourcing and how private and public sector organizations have tapped into the phenomenon.

    Viewpoints: Privacy and Security
    Against Cyberterrorism by Maura Conway
    The author argues why cyber-based terrorist attacks aren’t as likely to occur as might be commonly thought.

    Viewpoints: Economic and Business Dimensions
    Household Demand for Broadband Internet Service by Gregory Rosston, Scott Savage and Donald Waldman
    A consumer survey indicates what people are willing to pay for various speeds of Internet service.

    Viewpoints: Education
    From Science to Engineering by Mark Guzdial
    The need for finding and measuring better ways to teach computer science is explored, with comparisons to physics and engineering education.

    Posted in ACM/USACM News | Comments closed

    Policy Highlights from Communications of the ACM – January 2011 (Vol. 54, No. 1)

    Below is a list of items with policy relevance from the January issue of Communications of the ACM. As always, much of the material in CACM is premium content, and free content one month may slip behind a pay wall the next. You need to be a member of ACM or a subscriber to CACM to access premium content online.

    News: Society
    India’s Elephantine Effort by Marina Krakovsky
    Description of India’s efforts to establish a biometric ID program, in part to do better in delivering government subsidies to the people who are supposed to receive them.

    Viewpoints: Law and Technology
    Google AdWords and European Trademark Law by Stefan Bechtold
    The article reviews recent trademark infringement cases involving keyword searches and what liability Google may have in such matters.

    Viewpoint
    Cloud Computing Privacy Concerns on Our Doorstop by Mark D. Ryan
    Using the example of conference management systems, the author outlines the risks and benefits of cloud computing services.

    Contributed Articles
    Follow the Intellectual Property by Gio Wiederhold
    While movement of jobs between countries has occupied much attention in policy debates, the article focuses on the associated movement of intellectual property rights.

    Review Article
    A Firm Foundation for Private Data Analysis by Cynthia Dwork
    A review of the technical challenges of Differential Privacy – analyzing database information without disclosing private information about people in the database.

    Posted in ACM/USACM News | Comments closed

    Administration Issues National Strategy for Trusted Identities in Cyberspace

    Last Friday the Obama Administration released its National Strategy for Trusted Identities in Cyberspace (NSTIC), a plan to leverage private sector tools to make it easier for some kinds of transactions to happen online. This would include both consumer and government transactions, and attempt to establish a system where identity can be confirmed online in a way that is much more certain than what is commonly done online.

    The strategy outlines the establishment of an Identity Ecosystem that would “securely support transactions that range from anonymous to fully-authenticated and from low- to high-value.” This statement recognizes that some aspects of the Internet not only do not need identities to be confirmed to the same extent desired for something like a mortgage contract, but can thrive on anonymity. As the Strategy envisions this Ecosystem, various credentials and other means of authenticating or authorizing a person for certain activities or transactions would be established (likely evolving from some of what’s currently available). These items could then be used when a person seeks to access a number of different goods and services online. One of the selling points to consumers would be that this Ecosystem would reduce the need to maintain a number of different identities and/or passwords to operate on the web.

    While NSTIC envisions the private sector doing a fair amount of work, the government will proceed with establishing an implementation plan and a national program office to coordinate efforts. Arguably it is in the implementation plan, and how well it is followed, that will determine the success or failure of the strategy. In order for there to be trusted identities online, there must be trust in the tools used and in the entities charged with operating those tools. As this usually has required nudging to take place in other parts of the online landscape, it seems unlikely that this strategy will not be successfully implemented without trust.

    Last summer USACM issued comments on a draft of NSTIC. Those comments reflect the concerns expressed above concerning successful implementation and management of this strategy. They still make good sense moving forward with implementation of the Strategy. Issuing this document is the first step in what will likely be a long, multi-year process. It’s not too late to read the Strategy and follow the issue as the implementation plan is developed.

    Posted in Privacy and Security | Comments closed

    USACM Vice-Chair Testifies on Challenges of Electronic Employment Verification

    On April 14, Dr. Annie Ant?n, Vice Chair of USACM and Professor in the Computer Science Department of North Carolina State University, testified in front of the Social Security Subcommittee of the House Ways and Means Committee. She was one of the witnesses at a hearing on the Social Security Administration’s role in verifying employment eligibility. Other witnesses included staff from the Social Security Administration, the Government Accountability Office, and public interest groups interested in the issue. You can watch the hearing online.

    Dr. Ant?n’s testimony focused on the effectiveness of E-Verify, an electronic system of employment verification used in a number of states for an increasing number of employers, with over 16 million queries in fiscal year 2010. USACM has testified on E-Verify and/or electronic employment eligibility before, in 2008 and 2007.

    Highlights of Dr. Ant?n’s testimony included:

    • The E-Verify system cannot effectively detect individuals who use stolen or forged identities. A 2009 evaluation of E-Verify found that 54 percent of illegal immigrants checked by the system were incorrectly identified as employment-eligible for that reason.
    • Proper validation and testing of systems prior to widespread use will help minimize the possibilities of failure, which can contribute to additional identity theft and fraud.
    • Mission creep for a system like E-Verify can lead to additional technical issues, leading to cost and/or schedule overruns and increased security vulnerabilities.

    As this is the third time USACM has testified on this issue, it seems likely that the issue will continue to be a concern for Congress going forward.

    Posted in ACM/USACM News, Events, Privacy and Security | Comments closed

    Hill Tech Happenings, Week of April 11

    April 12

    Hearing:

    The Subcommittee on Federal Financial Management, Government Information, Federal Services, and International Security of the Senate Homeland Security and Governmental Affairs Committee will hold a hearing on executive branch plans to combat wasteful IT spending
    10:30 a.m., 342 Dirksen Building

    The Subcommittee on Crime and Terrorism of the Senate Judiciary Committee will hold a hearing on cybersecurity and cybercrime
    2:30 p.m., 226 Dirksen Building

    April 14

    Hearing:

    The Social Security Subcommittee of the House Ways and Means Committee will hold a hearing on the Social Security Administration’s obligations in electronic employment eligibility verification. USACM Co-Chair Dr. Annie Antón is one of the scheduled witnesses.
    2 p.m., B-318 Rayburn Building

    Posted in Events | Comments closed

    Hill Tech Happenings, Week of April 4

    April 6

    Hearing:

    The Senate Judiciary Committee will hold a hearing on the Electronic Communications Privacy Act.
    10 a.m., 226 Dirksen Building

    The Subcommittee on Intellectual Property, Competition and the Internet of the House Judiciary Committee will hold a hearing on Internet commerce.
    10:45 a.m., 2141 Rayburn Building

    Posted in Events | Comments closed

    Hill Tech Happenings, Week of March 28

    UPDATE: The March 29 hearing on cyber attacks has been postponed. No new date has been scheduled.

    March 29

    Hearing:

    The Senate Commerce, Science and Transportation Committee will hold a hearing on the economic impacts of cyber attacks.
    2:30 p.m., 253 Dirksen Building

    March 30

    Hearing:

    The Subcommittee in Intellectual Property, Competition and the Internet of the House Judiciary Committee will hold a hearing on the America Invents Act (this year’s effort at patent reform legislation).
    1:30 p.m., 2141 Rayburn Building

    Posted in Events | Comments closed

    Google Books Settlement Remains Unsettled

    The ongoing saga of the Google Books case will continue, according to a recent opinion from the judge overseeing the negotiated settlement. Google Books prompted a 2005 suit for copyright infringement because the service offered snippets of copyrighted material for viewing free-of-charge. The parties in the class action suit have been wrestling over a settlement since 2008. The most recent version of the settlement would, among other things, set up a registry for so-called orphan works (items still in copyright, but without an identifiable rights holder) and allow Google to make more of the copyrighted works it has scanned available for view and possibly for printing. Rights holders would receive some compensation for this permission and associated sales, but Google would retain exclusive access rights to a large number of books (though libraries and universities would be able to purchase subscriptions).

    There are several concerns about the settlement, including the status of international rights holders (the matter is a U.S. court case), and possible privacy infringements for those who browse Google Books. But the focus of this week’s opinion was on two areas: the copyright for orphan works and antitrust concerns. Each of those two areas relates to another concern – that the proposed settlement goes beyond addressing the harms that brought the suit about in the first place. The arrangements to handle distribution and copyright claims for orphan works are better suited for Congress to decide than the courts, and the initial case was limited to the showing of snippets of copyrighted material, not of whole works of copyrighted material.

    As envisioned in the settlement, it would be possible for a copyright owner to lose their rights because they do not opt out of the agreement. This is a noted break with past practice with respect to copyright owners, who are generally considered to have the right to do (or not) what they wish with respect to their works, and other parties seeking to use the work have the responsibility to obtain rights to it. Because orphan works are a significant portion of the works at issue in this case, it would be possible for someone who owns the copyright to a work to have it used by Google not only without their consent but without their knowledge.

    From the antitrust perspective, because Google is the only private entity engaged in the scanning of large amounts of copyrighted material (especially orphan works), they would have significant advantages in the markets for these works and for indexes to this work. Third parties can access, index, and display snippets of material Google has, but only if they have entered into agreements with Google. Part of the advantage to Google in market dominance comes from the shifts in copyright burden from third parties to copyright holders.

    The court has kept open the possibility of another revised settlement, encouraging the parties in its opinion to consider shifting the opt out requirement of the agreement to an opt in. This would appear to address most of the copyright concerns outlined in its opinion. A settlement conference is scheduled for April 25 to discuss further progress in the matter.

    Posted in Intellectual Property | Comments closed

    Policy Highlights from Communications of the ACM – December 2010 (Vol. 53, No. 12)

    Below is a list of items with policy relevance from the December issue of Communications of the ACM. As always, much of the material in CACM is premium content, and free content one month may slip behind a pay wall the next. You need to be a member of ACM or a subscriber to CACM to access premium content online.

    News: Education
    CSEdWeek Expands Its Reach by Marina Krakovsky
    A review of computer science education to note the second Computer Science Education Week held in December 2010.

    News: Society
    The New Face of War by Samuel Greengard
    A review of current and future possibilities in cyberattacks framed by the Stuxnet worm.

    News: Forum
    A Matter of Privacy by David Lindley
    Summary of a September 2010 forum about online privacy held in Washington, D.C.

    Viewpoints: Broadening Participation
    The Role of Hispanic-Serving Institutions in Contributing to an Educated Work Force by Ann Quiroz Gates
    The author argues that supporting the efforts of minority serving institutions to become stronger institutions provides an additional tool for encouraging broader participation from underrepresented groups in science, technology, engineering and mathematics fields.

    Viewpoints
    We Need a Research Data Census by Francine Berman
    An argument is made for a Research Data Census to take periodic snapshots of the digital data landscape. Such a census could provide guidance in decisions about data storage and management across the country.

    Practice
    The Theft of Business Innovation: An ACM-BCS Roundtable on Threats to Global Competitiveness by Mache Creeger
    A roundtable discussion among security and policy experts on the new security threat to business information.

    Posted in ACM/USACM News | Comments closed

    ACM Washington Update Vol. 15.2 (March 16 2011)

    CONTENTS

    [1] Newsletter Highlights
    [2] 2010 ACM A.M Turing Award Recognizes Les Valiant
    [3] USACM Supports Defense Against FY ‘11 Cuts
    [4] USACM Comments on Federal Trade Commission Online Privacy Report
    [5] USACM Joins Statement of Concern Over Expansion of Intercept Law
    [6] Senate Passes Patent Reform Bill
    [7] About USACM

    [An archive of all previous editions of Washington Update is available at http://www.acm.org/usacm/update/]


    [1] NEWSLETTER HIGHLIGHTS

    Contrary to press reports, there are other things going on in Washington besides the budget negotiations. There are more details on each item below, as well as on our weblog at:
    http://www.acm.org/usacm/weblog:

    * Les Valiant wins A.M Turing Award for his work in computer science theory.

    * USACM joined with other numerous other organizations on a letter urging the Senate to to resist deep cuts to science agency budgets approved recently by the House of Representatives.

    * USACM submitted comments in response to FTC’s preliminary staff report concerning online privacy. The report outlines a proposed privacy framework.

    * USACM signed on to a statement developed by the Center for Democracy and Technology in response to possible changes to the Communications Assistance for Law Enforcement Act (CALEA).

    * The Senate passed a bill intended to reform the patent system.


    [2] 2010 ACM A.M. TURING AWARD RECOGNIZES LES VALIANT

    Les Valiant, the T. Jefferson Coolidge Professor of Computer Science and Applied Mathematics at Harvard’s School of Engineering and Applied Sciences, has been recognized for his work in machine learning and the theory of computation with the 2010 ACM A.M. Turing Award. The Award, which comes with a $250,000 prize, is supported in part by Intel and Google, and is considered the top prize in computing. It is named for the British mathematician Alan Turing, who was instrumental in the early development of modern computing.

    Over his career, Dr. Valiant has made notable contributions to several parts of computer science theory. He helped establish the foundation of computer learning theory. Valiant also developed the concept of complexity of enumeration and a theory of algebraic computation. His work in parallel and distributed computing theory is also well regarded.

    Read more about Dr. Valiant’s work:
    http://www.acm.org/news/featured/turing-award-2010


    [3] USACM SUPPORTS DEFENSE AGAINST FY ‘11 CUTS

    USACM signed a letter sent to the Senate leadership early in March urging them to resist the deep cuts to science agency budgets approved by the House of Representatives. The cuts would be for the remainder of the current fiscal year. The letter was organized by the Task Force on American Innovation; over 170 organizations have signed on.

    The basic argument of the letter was to encourage the continued doubling path for the National Science Foundation, National Institute of Standards and Technology, and the Office of Science at the Department of Energy. Echoing language from the National Commission on Fiscal Responsibility and Reform, the letter indicates that even in a time of cuts and savings there is still a need for investment in education, infrastructure, and research and development, especially to help support needed economic growth. The proposed cuts work counter to that need for investment.

    The final resolution of this budget debate may be soon, or another temporary measure may have to be passed. The current continuing resolution that funds the government is scheduled to expire on March 18.

    The full letter can be read online at:
    http://www.aplu.org/NetCommunity/Document.Doc?id=3023


    [4] USACM COMMENTS ON FEDERAL TRADE COMMISSION ONLINE PRIVACY REPORT

    On February 18th, USACM submitted comments in response to the Federal Trade Commission’s (FTC) preliminary staff report concerning online privacy. Titled “Protecting Consumer Privacy in an Era of Rapid Change,” the report outlines a proposed privacy framework involving the following general principles:

    - Companies should integrate privacy into their regular business operations (a Privacy by Design approach)

    - Consumer choice needs to be presented in a more streamlined fashion than current practice

    - Companies should increase the transparency all of their data practices, including those in the parts of their business that don’t engage with consumers directly.

    The FTC also sought comment on the development and use of a Do Not Track policy comparable to the Do Not Call list to reduce telemarketing calls. USACM encouraged the FTC in its comments to define Do Not Track in a way that was technology neutral. It is also important to have a Do Not Track system that allows for a variety of consumer choices. There must be some options between track everything and track nothing so that consumers can really craft a personalized Internet experience that reflects their preferences. Additionally, USACM repeated its arguments for a dataflow-based lexicon and enhanced privacy risk models to help ensure consumer privacy online.

    The full report can be read online at:
    http://ftc.gov/os/2010/12/101201privacyreport.pdf

    ACM’s comments can be read online at:
    http://usacm.acm.org/PDF/Commerce_Department_Online_Privacy_Comments_USACM.pdf


    [5] USACM JOINS STATEMENT OF CONCERN OVER EXPANSION OF INTERCEPT LAW

    In the middle of February the Center for Democracy and Technology released a statement it developed to respond to possible changes to the Communications Assistance for Law Enforcement Act (CALEA). USACM is one of the organizations that signed the statement.

    The statement was developed due to press reports that there are efforts within the executive branch to expand the law, which requires companies to modify their electronic telecommunications equipment to facilitate wiretaps for law enforcement and other purposes. Originially passed in 1994, CALEA has been expanded to address changes in technology. However, as the statement indicates,

    “Clearly, lawful electronic surveillance plays an important role in enabling government agencies to fulfill their obligations to stop crime and to protect national security. These goals, however, must be reconciled with other important societal values, including cybersecurity, privacy, free speech, innovation and commerce.”

    The statement goes on to address significant concerns that need to be covered for future changes to laws that deal with electronic communications. It is important to preserve trust in communications systems.This can be achieved by safeguarding cybersecurity, not compromising encryption, protecting privacy and promoting accountability. If these steps (which are given more detail in the statement) are taken, the nation can support innovation and competitiveness interests while preserving lawful interests in electronic surveillance.

    There is no specific proposal to change CALEA at the present time. But there is enough of a concern about making sure electronic communications remain secure and productive that a statement like the one CDT issued makes sense.

    The full report can be read online at:
    http://www.cdt.org/pr_statement/statement-concern-about-expansion-calea


    [6] SENATE PASSES PATENT REFORM BILL

    On March 8 the Senate passed a bill intended to reform the patent system. S. 23, the Patent Reform Act of 2011, would take steps to harmonize the U.S. patent system with those in the rest of the world. The most notable change amongst them is to make the U.S. system based on the first to file rather than the first to invent. The bill also allows for relevant third parties to file information with the U.S. Patent and Trademark Office (USPTO). This information would assist USPTO examiners with the evaluation of the patent. And perhaps most importantly, the bill makes necessary changes to the USPTO that allow it greater control over the fee money that it collects and the ability to establish satellite offices (the first one is planned for Detroit).

    The entire Bill can be read online at:

    http://www.opencongress.org/bill/112-s23/text


    [7] ABOUT USACM

    USACM is the U.S. Public Policy Committee of the Association for Computing Machinery (ACM). ACM, the Association for Computing Machinery (www.acm.org), unites computing educators, researchers and professionals to inspire dialogue, share resources and address the field’s challenges. ACM strengthens the computing profession’s collective voice through strong leadership, promotion of the highest standards, and recognition of technical excellence. ACM supports the professional growth of its members by providing opportunities for life-long learning, career development, and professional networking.

    USACM acts as the focal point for ACM’s interaction with the U.S. Congress and government organizations. It seeks to educate and assist policy-makers on legislative and regulatory matters of concern to the computing community.

    For more information about USACM and ACM, see:

    http://www.acm.org/usacm/about.html


    BACK ISSUES

    For earlier editions of the ACM Washington Update, see:

    http://www.acm.org/usacm/update/

    SUBSCRIBE/UNSUBSCRIBE

    To subscribe to ACM’s Washington Update newsletter, send an e-mail to listserv@acm.org with “subscribe WASHINGTON-UPDATE “First Name” “Last Name” (no quotes) in the body of the message.

    To unsubscribe, simply include the “SIGNOFF WASHINGTON-UPDATE” command in an email to listserv@acm.org.

    As an alternative, enter your email address at: http://optout.acm.org/listserv_index.cfm?ln=washington-update and we’ll remove you.

    If in the future you’d like to re-subscribe, please enter your address at

    http://signup.acm.org/listserv_index.cfm?ln=washington-update

    Posted in ACM/USACM News | Comments closed

    Hill Tech Happenings, Week of March 14

    March 14

    Hearing:

    The Intellectual Property, Competition and the Internet Subcommittee of the House Judiciary Committee will hold a hearing on promoting and protecting Internet commerce
    4 p.m., 2141 Rayburn Building

    March 15

    Hearing:

    The Senate Judiciary Committee will hold a hearing on the Freedom of Information Act in the digital age
    10:15 a.m., 226 Dirksen Building

    March 16

    Hearing:

    The Senate Commerce, Science and Transportation Committee will have a hearing on the state of online consumer privacy.
    10 a.m., 253 Russell Building

    Cybersecurity, Infrastructure Protection and Security Technologies Subcommittee of the House Homeland Security Committee will hold a hearing on cyber threats to critical infrastructure.
    10 a.m., 311 Cannon Building

    March 17

    Briefing
    The American Chemical Society is sponsoring a briefing on supercomputing for science and economic competitiveness
    noon, Capitol Visitors Center

    Posted in Events | Comments closed

    Senate Passes Patent Reform Bill

    On March 8 the Senate passed a bill intended to reform the patent system. S. 23, the Patent Reform Act of 2011, would take steps to harmonize the U.S. patent system with those in the rest of the world. The most notable change amongst them is to make the U.S. system based on the first to file rather than the first to invent. The bill also allows for relevant third parties to file information with the U.S. Patent and Trademark Office (USPTO). This information would assist USPTO examiners with the evaluation of the patent. And perhaps most importantly, the bill makes necessary changes to the USPTO that allow it greater control over the fee money that it collects and the ability to establish satellite offices (the first one is planned for Detroit).

    The full text of the bill is available online. How quickly the House will address the bill is unclear.

    Posted in Intellectual Property | Comments closed

    2010 ACM A.M. Turing Award Recognizes Les Valiant

    Les Valiant, the T. Jefferson Coolidge Professor of Computer Science and Applied Mathematics at Harvard’s School of Engineering and Applied Sciences, has been recognized for his work in machine learning and the theory of computation with the 2010 ACM A.M. Turing Award. The Award, which comes with a $250,000 prize, is supported in part by Intel and Google, and is considered the top prize in computing. It is named for the British mathematician Alan Turing, who was instrumental in the early development of modern computing.

    Over his career, Dr. Valiant has made notable contributions to several parts of computer science theory. His 1984 paper, “A Theory of the Learnable” helped establish the foundation of computer learning theory. Valiant developed the concept of complexity of enumeration and a theory of algebraic computation. His work in parallel and distributed computing theory is also notable, advanced new models, strategies and algorithms that moved the field forward.

    Congratulations to Dr. Valiant on receiving the 2010 ACM A.M. Turing Award. You can learn more about Dr. Valiant’s work and the Turing Award via the ACM website and press release.

    Posted in ACM/USACM News, Miscellaneous | Comments closed

    USACM Supports Defense Against FY ‘11 Science Cuts

    USACM signed a letter sent to the Senate leadership last week urging them to resist the deep cuts to science agency budgets approved recently by the House of Representatives. The cuts would be for the remainder of the current fiscal year. The letter was organized by the Task Force on American Innovation and over 165 organizations have signed on.

    The basic argument of the letter was to encourage the continued doubling path for the National Science Foundation, National Institute of Standards and Technology, and the Office of Science at the Department of Energy. Echoing language from the Task Force letter supporting the COMPETES legislation and from the National Commission on Fiscal Responsibility and Reform, the letter indicates that even in a time of cuts and savings there is still a need for investment in education, infrastructure, and research and development, especially to help support needed economic growth. The proposed cuts work counter to that need for investment.

    The final resolution of this budget debate may be soon, as the current continuing resolution that funds the government is scheduled to expire on March 18.

    Posted in ACM/USACM News | Comments closed

    Hill Tech Happenings, Week of March 7

    March 8

    Meeting:

    The President’s Council of Advisers on Science and Technology will meet
    10 a.m., Marriott Metro Center, 775 12th Street NW, Washington, D.C. (webcast also available)

    March 9

    Meeting:

    The Data Privacy and Integrity Advisory Committee of the Department of Homeland Security will meet.
    1 p.m., Government Printing Office, 732 North Capitol Street, NW ? 8th Floor, Washington, D.C.

    Posted in Events | Comments closed

    Hill Tech Happenings, Week of February 28

    March 2

    Meeting

    The Information Security and Privacy Advisory Board will hold one of its periodic meetings.
    8:30 a.m., Homewood Suites by Hilton, 1475 Massachusetts Avenue, N.W., Washington, D.C. (continues through March 4, meeting should be webcast)

    March 3

    Information Security and Privacy Advisory Board meeting continues (see March 2)
    8:30 a.m., 1475 Massachusetts Avenue, N.W.

    March 4

    Information Security and Privacy Advisory Board meeting concludes (see March 2)
    8:30 a.m., 1475 Massachusetts Avenue, N.W.

    Posted in Events | Comments closed

    USACM Comments on Federal Trade Commission Online Privacy Report

    On February 18th, USACM submitted comments in response to the Federal Trade Commission’s (FTC) preliminary staff report concerning online privacy. Titled “Protecting Consumer Privacy in an Era of Rapid Change,” the report outlines a proposed privacy framework involving the following general principles:

  • Companies should integrate privacy into their regular business operations (a Privacy by Design approach)
  • Consumer choice needs to be presented in a more streamlined fashion than current practice
  • Companies should increase the transparency all of their data practices, including those in the parts of their business that don?t engage with consumers directly.
  • The FTC also sought comment on the development and use of a Do Not Track policy comparable to the Do Not Call list to reduce telemarketing calls.

    As the focus of the report shares significant overlap with the online privacy report from the Internet Policy Task Force at the Department of Commerce, there is also a fair amount of overlap between USACM’s comments to the FTC and its comments to the Department of Commerce. USACM comments to the FTC discuss the need for a dataflow-based lexicon and enhanced privacy risk models, as did our comments to the Department of Commerce.

    These comments did spend some time outlining how to approach a possible Do Not Track system. Recognizing that a Do Not Track option is an effort to move beyond standard opt-in and opt-out choices, USACM encouraged the FTC to define Do Not Track in a way that was technology neutral. It is also important to have a Do Not Track system that allows for a variety of consumer choices. There must be some options between track everything and track nothing so that consumers can really craft a personalized Internet experience that reflects their preferences.

    The comments submitted are just a part of the entire process the FTC is going through to develop new guidance for improving consumer privacy online. A final report, or even proposed regulations, are several months away.

    Posted in ACM/USACM News, Privacy and Security | Comments closed

    USACM Joins Statement of Concern Over Expansion of Intercept Law

    Today the Center for Democracy and Technology released a statement it developed to respond to possible changes to the Communications Assistance for Law Enforcement Act (CALEA). USACM is one of the organizations that signed on to the statement.

    The statement was developed due to press reports that there are efforts within the executive branch to expand the law, which requires companies to modify their electronic telecommunications equipment to facilitate wiretaps for law enforcement and other purposes. Originially passed in 1994, CALEA has been expanded to address changes in technology. However, as the statement indicates,

    “Clearly, lawful electronic surveillance plays an important role in enabling government agencies to fulfill their obligations to stop crime and to protect national security. These goals, however, must be reconciled with other important societal values, including cybersecurity, privacy, free speech, innovation and commerce.”

    The statement goes on to address significant concerns that need to be covered for future changes to laws that deal with electronic communications. It is important to preserve trust in communications systems. This can be achieved by safeguarding cybersecurity, not compromising encryption, protecting privacy and promoting accountability. If these steps (which are given more detail in the statement) are taken, the nation can support innovation and competitiveness interests while preserving lawful interests in electronic surveillance.

    Again, there is no specific proposal to change CALEA at the present time. But there is enough of a concern about making sure electronic communications remain secure and productive that a statement like the one CDT issued makes sense.

    Posted in ACM/USACM News, Privacy and Security | Comments closed

    ACM Washington Update Vol. 15.1 (February 16 2011)

    CONTENTS

    [1] Newsletter Highlights
    [2] USACM Comments on Proposed Web Accessibility Guidance
    [3] USACM Responds to Department of Commerce Online Privacy Report
    [4] Computers Freedom And Privacy Conference 2011
    [5] NITRD Program Asked for Input on K-12 Computer Science Education
    [6] President Signs COMPETES Act Reauthorization
    [7] About USACM

    [An archive of all previous editions of Washington Update is available at


    [1] NEWSLETTER HIGHLIGHTS

    There are more details on each item below, as well as on our weblog at:

    http://www.acm.org/usacm/weblog:

    * USACM submitted comments to the Department of Justice on how to help make websites compliant with the Americans with Disabilities Act.

    * USACM responds to the Internet Policy Task Force online privacy report by recommending implementation of Fair Information Practice Principles (FIPPs) as well as additional tools for modeling privacy risks.

    * The 2011 Computers, Freedom and Privacy Conference will be June 14th through 16 in Washington, D.C. This year’s conference theme is “The Future is Now.”

    * The federal Networking and Information Technology Research and Development program sought input on some key questions about K-12 CS education.

    * President Obama signed into law the reauthorization of the America COMPETES Act, which supports continued increases in federal support for physical sciences research.


    [2] USACM COMMENTS ON PROPOSED WEB ACCESSIBILITY GUIDANCE

    The Department of Justice requested comments on some proposed regulations it is working on for website compliance with the Americans with Disabilities Act (ADA). USACM recently submitted comments which included the following recommendations on how to encourage websites covered by the ADA to be compliant.

    * Promote Awareness – The public does not have a full understanding of the Americans with Disabilities Act and how it already applies to the Web or how improving accessibility can often be an inexpensive process. Educational resources aimed at improving awareness of the ADA, how it might apply to particular Web sites, and how Web site developers and operators might improve accessibility can reduce resistance and increase compliance.

    * Encourage Tool and Software Development – The department should encourage tool and software development to make it easier for developers and content providers to design accessible Web page and Web services.

    * Adopt the Section 508 Standards – Section 508 standards are currently required for government Web sites. It will be easier for Web developers and builders to work with a uniform standard rather than one set for federal Web sites and another for non-federal sites that must be ADA-compliant. For that reason we recommend adopting the Section 508 standards over the WCAG 2.0 standards

    * Voluntary Certification – We recommend that the Department establish a voluntary certification program for Web sites to demonstrate to visitors that the site is compliant with accessibility standards. This would complement the awareness promotion we recommend.

    * Lead by Example – Besides ensuring its own compliance with the ADA, federal government leadership in making its own Web sites compliant will help uncover useful tools and best practices that developers and builders can use in non-governmental Web sites.

    * Seek Clarity About Compliance – While the ADA already applies to the Web, there exists no guidance about what must comply, how to comply, and who is responsible for what parts of the compliance process, including auditing.

    * Encourage Compliance, Not Removal – Depending on how standards are set, implemented and supported, some Web sites may find it easier to remove content rather than comply with the law. Recognizing that the ADA already has undue burden provisions, the Department should still make sure that people understand the standards and how they can be achieved with reasonable means.

    This is the first step in what is likely a long-term process for the Department to draft rules, consult with groups affected by these rules, and finalize those rules.

    The full response can be read online at:
    http://usacm.acm.org/PDF/USACM_Response_to_DOJ_ANPRM.pdf


    [3] USACM RESPONDS TO DEPARTMENT OF COMMERECE ONLINE PRIVACY REPORT

    In December the Internet Policy Task Force (a Commerce Department group drawing on expertise from the Patent and Trademark Office, the International Trade Administration, the National Institute of Standards and Technology, and the National Telecommunications and Information Administration) released a report on commercial data privacy. This followed the release earlier that month of a Federal Trade Commission report about online privacy.

    USACM submitted comments on the report. A major theme of the comments was that Fair Information Practice Principles (FIPPs) are good (and should be broadly implemented), but they are insufficient in themselves for ensuring data privacy in an age of rapidly shifting practices and technological capabilities. USACM strongly encourages the use of three additional items to help strengthen online privacy protection.

    A dataflow-based lexicon – The lexicon would help define flows of personal information and provide meaningful references terms. This will assist in managing the variety of different purposes for which information could be used online and be adaptable to reflect changing technologies.

    Enhanced privacy risk models – FIPPs do not adequate address norms and harms, which means that practices that are otherwise compliant with FIPPs could be contrary to what a reasonable person would expect or cause harms. An enhanced privacy risk model would address context and harms, as well as be able to adapt for changes in technology and how those changes affect currently held assumptions about privacy.

    Privacy Impact Assessments (PIA) – A practice followed by some government agencies when implementing particular policies, PIAs can help spread the use of enhanced privacy risk models and FIPPs.

    With both the Department of Commerce and the Federal Trade Commission spending significant time over online privacy, it is possible that the executive branch may take significant action in this area. In turn, this could motivate Congress to go further in developing online privacy legislation than it has in the past.

    The full comments can be read online at:
    http://usacm.acm.org/PDF/Commerce_Department_Online_Privacy_Comments_USACM.pdf


    [4] COMPUTERS FREEDOM AND PRIVACY CONFERENCE 2011

    The Computers, Freedom and Privacy Conference (CFP) will take place this year June 14 through the 16th in Washington D.C. ACM is one of the conference sponsors.

    This year’s theme is “The Future is Now. The CFP, the 21st, will take place at the Georgetown University Law Center. The conference, as the name suggests, tackles issues involving the intersections of computing, privacy, and related freedoms. More information will be available soon.

    The conference organizers have released their call for submissions. The early bird deadline is March 15, and the final deadline is April 1.

    Find out more at the conference website:
    http://www.cfp.org/2011/wiki/index.php/Main_Page


    [5] NITRD PROGRAM ASKED FOR INPUT ON K-12 COMPUTER SCIENCE EDUCAITION

    The federal government asks for advice about education fairly regularly. But it isn’t often that it asks specifically what is needed to advance K-12 computer science education. So it was a pleasant surprise when one federal program asked some key questions about K-12 CS education. Members of our community had the opportunity to speak up about what they think is needed for a stronger K-12 CS education.

    Prompted by a report from the Presidents top science advisors, The Networking and Information Technology Research and Development Program (NITRD) asked three sets of big and open-ended questions:

    * What CS concepts are important to effective elementary, secondary, and post-secondary curricula? Among these concepts, which are commonly found in curricula today? Which are missing?

    * What do teachers need (including preparation and training, tools, and resources) to be able to deliver CS education effectively?

    * What factors are important in promoting student interest in CS?

    Comments had to be submitted by January 31.


    [6] PRESIDENT SIGNS COMPETES ACT REAUTHORIZATION

    President Obama signed into law the reauthorization of the America COMPETES Act. The bill continues (among other things) the increasing funding trend for the National Institute of Standards and Technology, the National Science Foundation, and the Office of Science at the Department of Energy started with the American Competitiveness Initiative introduced by President Bush. USACM and ACM’s Education Policy Committee co-authored a letter in support of the bill back in May of 2010, specifically focusing on the parts of the legislation that support science, technology, engineering and mathematics (STEM) education.

    Besides extended support for STEM education and increased federal funding for physical science research, the COMPETES reauthorization applies to the Advanced Research Projects Agency – Energy, and gives federal agencies and departments the authority to conduct prize competitions, which is part of President Obama’s Strategy for American Innovation. The funding allowed in the bill will have to be appropriated by Congress, so the fight for the continued budget support is far from over.


    BACK ISSUES

    For earlier editions of the ACM Washington Update, see:

    http://www.acm.org/usacm/update/

    SUBSCRIBE/UNSUBSCRIBE

    To subscribe to ACM’s Washington Update newsletter, send an e-mail to
    listserv@acm.org with “subscribe WASHINGTON-UPDATE “First Name” “Last Name”
    (no quotes) in the body of the message.

    To unsubscribe, simply include the “SIGNOFF WASHINGTON-UPDATE” command in an
    email to listserv@acm.org.

    As an alternative, enter your email address at http://optout.acm.org/listserv_index.cfm?ln=washington-update and we’ll remove you.

    If in the future you’d like to re-subscribe, please enter your address at

    http://signup.acm.org/listserv_index.cfm?ln=washington-update

    Posted in ACM/USACM News | Comments closed

    Hill Tech Happenings, Week of February 14

    This week the President released his Fiscal Year 2012 budget request. As a result, there will be several events, many of them today, where federal agencies discuss their portion of the request. Congressional hearings on this request will follow over the next few weeks.

    February 15

    Hearing:

    The Committee on House Administration will hold a hearing on military and overseas voting in the 2010 election.
    10:30 a.m., 1310 Longworth Building

    The Intellectual Property, Competition and the Internet Subcommittee of the House Judiciary Committee will hold a hearing on Internet competition
    1:30 p.m., 2141 Rayburn Building

    February 16

    Hearing:

    The Senate Judiciary Committee will hold a hearing on websites dedicated to stealing intellectual property.
    10 a.m., 226 Dirksen Building

    February 17

    Hearing:

    The Crime, Terrorism and Homeland Security Subcommittee of the House Judiciary Committee will hold a hearing on lawful surveillance and new technologies.
    10 a.m., 2141 Rayburn Building

    Posted in Events | Comments closed

    DC ACM Chapter Co-Hosts Discussion on Digital Government

    On February 17th, the D.C. Chapter of the Association for Computing Machinery and the New America Foundation will co-host a panel discussion, “The Open Government Directive: A Year Later.” The Open Government Directive was established by the Obama Administration in order to encourage the disclosure of more federal information online in a usable and accessible fashion for the public. It’s part of a larger Open Government Initiative that includes the development of websites like Data.gov. The event is scheduled to run from 5:30 to 7 p.m. at the New American Foundation offices in Washington.

    Participants in the discussion are:

    Panelists
    Tom Lee
    Sunlight Foundation

    Andrew McLaughlin
    Previous White House Deputy Chief Technology Officer

    Elana Berkowitz (invited)
    Open Technology Initiative Fellow
    New America Foundation

    Moderator
    Tom Glaisyer
    New America Foundation

    Part of what they hope to address in the discussion are some important issues related to the massive release of data associated with the Initiative. These issues include:

    • How are companies and organizations using this new government data?
    • What challenges are there in aggregating the various data sources?
    • What are the policies/barriers to the use of third-party tools to enhance the usefulness of this new information? And is this new openness helping provide citizens with better access and higher-quality information?

    For more information and to register, visit the event’s webpage. Any video taken of the event should be available at that page after the event takes place.

    Posted in Events | Comments closed

    Hill Tech Happenings, Week of February 7

    February 10

    Hearing:

    The Immigration Policy and Enforcement Subcommittee of the House Judiciary Committee will hold a hearing on the E-Verify program, an electronic employment eligibility verification system.
    10 a.m., 2141 Rayburn Building

    Markup:

    The House Science, Space and Technology Committee will meet to formally organize.
    2 p.m., 2318 Rayburn Building

    Posted in Events | Comments closed

    Policy Highlights from Communications of the ACM – November 2010 (Vol. 53, No. 11)

    Below is a list of items with policy relevance from the November issue of Communications of the ACM. As always, much of the material in CACM is premium content, and free content one month may slip behind a pay wall the next. You need to be a member of ACM or a subscriber to CACM to access premium content online.

    ACM Member News, by Jack Rosenberger
    Chris Stephenson, Executive Director of the Computer Science Teachers Association and member of the ACM Education Policy Committee, is interviewed about K-12 computer science education in the U.S.

    News: Technology
    Security in the Cloud by Gary Anthes
    The author outlines security challenges involved with cloud computing (including a lack of clear regulatory or legal guidance) and what researchers are doing to address them.

    News: Society
    Career Opportunities by Leah Hoffman
    Computer science graduates face a reasonably strong labor market, and Hoffman discusses what else is bringing students back to the field.

    News: Emerging Technology
    Wide Open Spaces by Neil Savage
    A brief outline of the possibilities for the recent Federal Communications Commission decision to open frequencies in the broadcast spectrum.

    Viewpoints: Legally Speaking
    Why Do Software Startups Patent (or Not)? by Pamela Samuelson
    Samuelson discusses a recent article that analyzes the 2008 Berkeley Patent Survey.

    Viewpoints: Privacy and Security
    Why Isn’t Cyberspace More Secure? by Joel F. Brenner
    Brenner discusses the perpetual trend of federal cyberspace reviews that yield little progress, and what federal actions could be taken to improve Internet security.

    Contributed Articles
    Regulating the Information Gatekeepers by Patrick Vogel and Michael Barrett
    The authors examine whether or not search-engine ranking should be regulated, at least in part to counter inappropriate search engine optimization and other targeted manipulation of search engine rankings.

    Review Articles
    Using Complexity to Protect Elections by Piotr Faliszewski, Edith Hemaspaandra, and Lane A. Hemaspaandra
    The authors outline an approach to protecting elections where the election is made computationally prohibitive to prohibitive.

    Posted in ACM/USACM News | Comments closed

    USACM Responds to Department of Commerce Online Privacy Report

    Last month the Internet Policy Task Force (a Commerce Department group drawing on expertise from the Patent and Trademark Office, the International Trade Administration, the National Institute of Standards and Technology, and the National Telecommunications and Information Administration) released a report on commercial data privacy. This complemented the release in the same month of a Federal Trade Commission report about online privacy.

    Responding to the report, and to some of the specific questions the Task Force wants answers for, USACM submitted comments. A major theme of our comments is that Fair Information Practice Principles (FIPPs) are good (and should be broadly implemented), but they are insufficient in themselves for ensuring data privacy in an age of rapidly shifting practices and technological capabilities. We strongly encourage the use of three additional items to help strengthen online privacy protection.

    A dataflow-based lexicon – The lexicon would help define flows of personal information and provide meaningful references terms. This will assist in managing the variety of different purposes for which information could be used online and be adaptable to reflect changing technologies.

    Enhanced privacy risk models – FIPPs do not adequate address norms and harms, which means that practices that are otherwise compliant with FIPPs could be contrary to what a ‘reasonable’ person would expect or cause harms. An enhanced privacy risk model would address context and harms, as well as be able to adapt for changes in technology and how those changes affect currently held assumptions about privacy.

    Privacy Impact Assessments (PIA) – A practice followed by some government agencies, such impact assessments can help spread the use of enhanced privacy risk models.

    Privacy and security doesn’t have to be an either/or proposition. By following practices like those suggested in USACM’s comment, both privacy and security can be attained.

    Read our press release as well as our full comments online.

    Posted in ACM/USACM News, Privacy and Security | Comments closed

    Save the Date – Computers, Freedom and Privacy Conference 2011

    The Computers, Freedom and Privacy Conference (CFP) will take place this year June 14 through the 16th in Washington D.C. ACM is one of the conference sponsors.

    This year’s theme is “The Future is Now.” The CFP, the 21st, will take place at the Georgetown University Law Center. The conference, as the name suggests, tackles issues involving the intersections of computing, privacy, and related freedoms. More information should be available soon at the conference website -http://www.cfp.org/2011/wiki/index.php/Main_Page

    ADDED – February 7 – the conference organizers have released their call for submissions. The early bird deadline is March 15, and the final deadline is April 1.

    Posted in Events | Comments closed

    USACM Comments on Proposed Web Accessibility Rules

    The Americans with Disabilities Act (ADA) was passed in 1990, and did not address the Internet. However, the Department of Justice established, most notably through a case involving Target, established that the ADA provisions applied to websites. However, the Department has not been forthcoming with guidance on how websites can be made compliant with the ADA. That is about to change.

    The Department requested comment on some possible rules it is working on for website compliance with the ADA. USACM recently submitted comments addressing the topic in general, and some of the specific questions asked by the Department. You can also read the ACM press release on the subject.

    The following are the recommendations USACM submitted to the Department of Justice. Our full response is available online.

    • Promote Awareness ? The public does not have a full understanding of the Americans with Disabilities Act or how it already applies to the Web. Nor does it understand how improving accessibility of Web sites can often be a relatively inexpensive process. Educational resources aimed at improving awareness of the ADA, how it might apply to particular Web sites, and how Web site developers and operators might improve accessibility can reduce resistance and increase compliance.
    • Encourage Tool and Software Development ?The department should encourage tool and software development to make it easier for developers and content providers to design accessible Web page and Web services. Improved tools for testing and auditing Web accessibility might provide clearer feedback and assistance in improving accessibility, thus simplifying the process of bringing sites into compliance.
    • Adopt the Section 508 Standards ? The current use of Section 508 standards for government Web sites gives them an edge over the WCAG 2.0 standards. It will be easier for Web developers and builders to work with a uniform standards rather than one set for federal Web sites and another for non-federal sites that must be ADA-compliant.
    • Voluntary Certification ? We recommend that the Department establish a voluntary certification program for Web sites to demonstrate to visitors that the site is compliant with accessibility standards. This would complement the awareness promotion we recommend.
    • Lead by Example ? Besides ensuring its own compliance with the ADA, federal government leadership in making its own Web sites compliant will help uncover useful tools and best practices that developers and builders can use in non-governmental Web sites.
    • Seek Clarity About Compliance ? While the ADA already applies to the Web, there exists no guidance about what must comply, how to comply, and who is responsible for what parts of the compliance process, including auditing. Answering those questions must inform the rulemaking process, and resources must be available to make sure people who have these questions can have them answered once compliance becomes a requirement.
    • Encourage Compliance, Not Removal ? Depending on how standards are set, implemented and supported, some Web sites may find it easier to remove content rather than comply with the law. Recognizing that the ADA already has undue burden provisions, the Department should still make sure that people understand the standards and how they can be achieved with reasonable means.
    Posted in ACM/USACM News, Web Accessibility | Comments closed

    Hill Tech Happenings, Week of January 31

    January 31

    Event:

    The Information Technology and Innovation Foundation will host an event on the bandwidth cost of online piracy.
    noon, 1101 K Street NW

    February 2

    Briefing:

    The National Immigration Law Center will hold a briefing on the impacts of a mandatory electronic employment verification scheme.
    10 a.m., 2456 Rayburn Building

    Posted in Events | Comments closed