Andrews began by commending PSE&G on the proactive efforts they have instituted to protect their installations from cyber attacks and he referenced PSE&G as an example of a private company that is aggressively addressing potential vulnerabilities to cyber-terrorism.  However, Andrews cautioned that many private-sector companies that serve a public service are frighteningly vulnerable to such attacks, which are capable of paralyzing entire regions of the country for extended periods of time. 

Andrews explained that a central power station, located in Valley Forge, PA, is the main hub in a network of switching stations, throughout Pennsylvania, Delaware, New Jersey, Maryland, Virginia, and Washington, D.C., including the Gloucester City switching station which supplies power to much of Gloucester and Camden counties.  Power service to facilities that serve a public service such as hospitals and water companies as well as the air traffic control systems and Emergency Management Services in the region would be jeopardized if this site were the target of a cyber-attack.  This would force these installations to rely on back up generators until the problem could be remedied.  Additionally, an attack on this grid could potentially disrupt power service to over eight million homes throughout New Jersey and the East Coast.  

"As evidenced by recent "denial of service" attacks on several major web sites, the threat of cyber-terrorism is a reality that can and will continue to disrupt businesses causing temporary chaos and fiscal disaster," said Andrews.  "It is very important that we stay more than one step ahead of those who would do us harm through cyber-terrorism or cyber-vandalism.  More and more of our nation's critical infrastructure – from communication to transportation to public safety to energy systems -- depends on computers which can be accessed on-line, and which are therefore vulnerable to attack from cyber-criminals."   

Working in conjunction with the United States Department of Defense (DOD), Andrews' plan is designed to grant the DOD increased jurisdiction to work with private industry to develop new strategies to defend against cyber-terrorism. The DOD would first work to prevent these breaches against government and private installations and then would work with the United States Department of Justice to prosecute both foreign and domestic perpetrators, who attempt such attacks. 

Currently, it is presumed that assailants living within the borders of the United States perpetrate these attacks against U.S. computer networks and so the attacks are characterized as crimes rather than terrorist acts.  As such, the DOD is hindered from getting involved in this investigation because, the U.S. Department of Justice (DOJ) maintains jurisdiction as this is deemed a criminal matter.  In many cases, when the criminals access computers outside of U.S. borders, the DOJ is unable to adequately prosecute these cases as it lacks the resources to investigate these types of terrorist attacks. This new proposal would, in a limited fashion, allow the DOD to participate in the investigation of these crimes by allowing the DOD to enter into the investigation from the outset.  The DOD would then be able to capitalize on their sophisticated technology, intelligence and training, coupled with their authority to operate beyond the United States borders to pursue these criminals while the trail is still fresh.

In order to successfully prosecute these attacks, the DOD will need to improve their ability to monitor for and defend against these hackers on a continual basis.  Andrews plan allows the DOD, at their discretion, to contract with private entities as well as to aggressively recruit and hire new personnel skilled in high technology areas.  Additionally, the Andrews plan adds a strong incentive for business and industry to increase their cyber-defenses. His plan authorizes funding to provide competitive grants to public and private entities like PSE&G that provide for the safety of the general public so that these entities can work with the DOD to identify any existing vulnerability in their networked systems to protect them from cyber attacks.

Andrews plan is an attempt to carry forward President Clinton's call in January of this year for a  $91 million initiative to provide for salary and bonuses for hiring new personnel skilled in high technology fields.  This funding will also pay for DOD contracts with private businesses that specialize in areas of counter cyber-terrorism and grants to private and public entities that provide a public safety service.  

The United States Department of Defense has said that Congressman Andrews has been a leading member of Congress in addressing cyber-terrorism issues, as it relates to the Department of Defense.  He has quickly developed an understanding of cyber-terrorism problems, and has been working tirelessly to advance the knowledge of his fellow Members of Congress.  Congressman Andrews is working hand-in-hand with Department of Defense to address these problems. 

"America's national security requires us to give private businesses the tools to combat these cyber-predators," said the Congressman.  "We must ensure the security of our nation's infrastructure as well as to ensure the safety of the general public." 

Andrews is scheduled to introduce his legislation as part of the FY 2001 Defense re-authorization bill which will be voted on next month.  He has pledged to work to insure its inclusion in the final Defense budget that will be passed on to the President later this year.

# # #