indianz.com your internet resource indianz.com on facebook indianz.com on twitter indianz.com on Google+ indianz.com on soundcloud
phone: 202 630 8439
Sovereignty and E-Commerce:  Innovating and Reshaping the  Borders of Indian Country - Arizona State University Third Annual Tribal Government E-Commerce CLE Conference
Advertise on Indianz.Com
Home > News > Headlines

printer friendly version
Lamberth holds hearing on Indian trust security
Thursday, April 21, 2005

The federal judge handling the Indian trust fund case moved forward with his oversight of the Interior Department's computer systems on Wednesday in light of new reports of vulnerabilities.

U.S. District Judge Royce Lamberth held a two-hour hearing in Washington, D.C., on the state of information technology at the department. It was his first foray into the subject since a federal appeals court last December lifted an order that disconnected the department's computer systems from the Internet.

In recent testimony to Congress, associate deputy secretary Jim Cason characterized the decision as one of the Bush administration's "victories" in the long-running Cobell v. Norton case. But information technology woes continue to plague the department, with an internal report forcing the Bureau of Land Management to shut down its website due to the "poor state of network security."

Lamberth said he was willing to hold an evidentiary hearing and call witnesses -- potentially including Cason -- to get to the heart of the matter. The appeals court cited the lack of such a hearing when it lifted the shutdown order.

Dennis Gingold, an attorney for the Cobell plaintiffs, said he was ready to go to trial on the issue "next week." He told the court that that billions in individual Indian trust funds are at risk to computer hackers unless the relevant computer systems are removed from the Internet and turned off.

"The consequences are terrible," Gingold said. "You can transfer property, you can transfer money, you can order checks" without being detected, he said.

Glenn Gillette, a Department of Justice attorney, didn't immediately object to holding of the evidentiary hearing. But he suggested it should be delayed until both sides can collect more evidence to determine whether the computer systems are secure.

"Clearly, the individual Indian trust data today is more secure than it has been," Gillette told the court. He said the department has spent $100 million over the past three years to install firewalls, redesign the network and take other measures to beef up the systems.

Lamberth indicated he welcomed some of the changes that have been made, including the department's decision to conduct "penetration" tests to identify security gaps. "It's exactly what I was asking to be done" in ordering the shutdown that was lifted by the appeals court, he said.

But he voiced concerns about Interior's continued management of the Indian trust. In fighting the Internet shutdown, the department complained that its day-to-day operations were harmed, a situation that could be avoided if trust and non-trust data were separated.

"Why doesn't Interior keep the trust data in a separate system?" Lamberth asked. "Why do they want to keep the data intermingled?"

Gillette said the department's long-term goal was to keep the data separate but he didn't know when that would be accomplished. Currently, if all of the systems are shut down, "You have almost no ability to do any work," he told the court.

Lamberth also said he had problems with the department's proposal to keep secret the internal report that prompted the BLM shutdown. "I don't think it's fair to the public," he told Interior Secretary Gale Norton's defense team, who have not provided the entire report to the court or to the Cobell plaintiffs but provided a key detail in a filing.

On April 6, the Inspector General at Interior issued a report that outlined the results of a penetration test at an unknown agency. "Given the poor state of network security at [agency] and the weak access controls we encountered on many systems, it is safe to say that we could have easily compromised the confidentiality, integrity, and availability of the identified Indian Trust data residing on those systems," the document stated, according to the filing.

Two days later, Norton's attorneys asked the court to seal the IG report but Lamberth said their proposed order was "overbroad" and would prevent its release in its entirety. "I'm not going to buy an argument like that," he said before asking the lawyers to draft language that would identify which parts of the report might be redacted and under what standard.

In their filings, Norton's attorneys refused to discuss further details of the security vulnerabilities. But shortly afterward, two computer-related publications reported that the BLM was the agency at issue.

Gillette yesterday did offer additional information when pressed by the court. He said the penetration test found problems with a BLM e-mail server and "other associated servers" that he didn't identify. He said the systems failed due to a lack of "adequate encryption and password protection."

"This penetration test was run under a program initiated by Interior," he told Lamberth. "This testing is well beyond the normal standard done for [similar] systems."

The contractors hired by the IG were able to exploit the vulnerabilities and "get into BLM systems," Gillette acknowledged. "These folks were good," he said, suggesting that an ordinary hacker would not be able to compromise the network.

The IG has issued similar penetration test reports for the Bureau of Indian Affairs, Office of Special Trustee and Office of Hearings and Appeals, and issued another one for the National Business Center in Denver just two days ago, Gillette said. Similar tests are underway for the Minerals Management System, which handles $6 billion in Indian and other royalties a year.

Information technology surfaced as an issue in November 2001 when the former special master in the case hired a computer security firm that was able to break into the Indian trust systems easily. The discovery led to the first Internet shutdown a month later.

Since then, the overwhelming majority of the department's computer systems are back online. The only major exception is the Bureau of Indian Affairs.

The Bush administration, however, has continued to dispute whether Lamberth has the authority to oversee the computer systems. The D.C. Circuit Court of Appeals lifted the most recent shutdown order but supported Lamberth and the Cobell plaintiffs on this point.

"It is indisputable that the Secretary has current and prospective trust management duties that necessitate maintaining secure IT systems in order to render accurate accountings now and in the future," the court said.

Relevant Links:
Indian Trust: Cobell v. Norton - http://www.indiantrust.com
Cobell v. Norton, Department of Justice - http://www.usdoj.gov/civil/cases/cobell/index.htm
Indian Trust, Department of Interior - http://www.doi.gov/indiantrust

Related Stories:
Lamberth schedules hearing on computer systems (4/20)
Norton blocking information technology report (4/18)
Appeals court supports Lamberth's authority on IT (12/06)
Lamberth critical of Norton's 'bad faith' on trust fund (10/25)
NCAI 04 Wrapup: Day 2 (10/13)
Interior denies attempt to halt trust fund payments (10/05)
Swimmer: Communication with account holders on hold (10/04)
Bush administration challenges trust fund ruling (09/16)
Appeals court takes on Cobell trust fund case (9/15)
Richardson pushes Norton to protect trust fund (08/16)
Small percentage of Interior's IT systems secure (08/10)
Johnson promises 'meaningful' investigation of OST (06/21)
BIA takes advantage of Internet shutdown (05/11)
DOI's Internet connection shut down for third time (03/16)
BIA shows off information technology facility (3/2)
Anderson touts benefits of Cobell trust fund case (02/25)
Lamberth orders DOI to turn over IT reports (12/12)
DOI fares poorly on computer security report card (12/11)
Judge seeks to break impasse over trust systems (07/29)
BIA incident prompts high-level recommendation (03/27)
Court report blasts McCaleb for destroying records (01/27)
Court: McCaleb 'fabricated' e-mail story (1/24)
BIA aides circumventing court (12/16)
Martin's role in incident surfaces (12/16)
BIA aides e-mail use prompts inquiry (12/17)
McCaleb admits to e-mail 'misunderstanding' (10/23)
Burns takes on BIA problems in stride (08/23)
McCaleb gets new computer official (6/5)
Retaliation charged as BIA official jumps ship (7/25)

Copyright © 2000-2005 Indianz.Com
More headlines...
Stay Connected:
On Facebook

On Twitter

On Google+

On SoundCloud
Local Links:
Federal Register | Indian Gaming | Jobs & Notices | In The Hoop | Message Board
Latest News:
Office of Special Trustee pitches lower budget as 'taxpayer' savings (5/23)
Steven Newcomb: Monuments to white supremacy harm our people (5/23)
Two more spills of oil from Dakota Access Pipeline in North Dakota (5/23)
Native woman in skirt and sandals wins ultramarathon in Mexico (5/23)
Brothers from Huichol Tribe murdered as drug war rages in Mexico (5/23)
Iowa Tribe misses deadline again to launch internet poker project (5/23)
Mississippi Choctaw citizens request vote on $25M casino project (5/23)
Aquinnah Wampanoag Tribe must wait to restart work on casino (5/23)
Documents show few meetings between Secretary Zinke and tribes (5/22)
Landowners on 2 reservations in Nebraska receive buy-back offers (5/22)
Human Rights Complaint: 'We are only letting the white people in' (5/22)
Mark Trahant: Funds for Indian health in danger under Republicans (5/22)
Cronkite News: Navajo Nation school works hard to teach language (5/22)
Harlan McKosato: DNA tests can't reveal your unique tribal history (5/22)
Gyasi Ross: Fired FBI director made sure Peltier remained in prison (5/22)
Tiffany Midge: A response to winning the cultural appropriation prize (5/22)
André Cramblit: Treasure your aunties and uncles for their histories (5/22)
Treaty tribes celebrate after court refuses to rehear salmon dispute (5/22)
Eastern Cherokee leaders open impeachment hearing against chief (5/22)
Top Interior nominee contradicts Trump on 'race' and tribal programs (5/19)
Arne Vainio: Expressing gratitude for the people we have around us (5/19)
Lawmakers dug deep to help North Dakota with #NoDAPL response (5/19)
Quapaw Tribe secures EPA grant for cleanup of contaminated lands (5/19)
Steven Newcomb: The racist and toxic roots of federal Indian policy (5/19)
Indian Country braces for worst with Trump's planned budget cuts (5/18)
Bipartisan task force announced to look into Indian Health Service (5/18)
Lawmakers push to renew Special Diabetes Program for Indians (5/18)
Albert Bender: Police slaughter of Native people rages unabated (5/18)
Steve Russell: There's a downside to impeaching Donald Trump (5/18)
Flandreau Santee Sioux Tribe cannabis consultant goes on trial (5/18)
Lower Brule Sioux Tribe repays money to address federal audit (5/18)
House passes bill to extend federal recognition to Virginia tribes (5/18)
Kalispel Tribe using bottled water at casino after contamination (5/18)
Leech Lake Band wins approval to build new casino at new site (5/18)
Tohono O'odham Nation secures victory in long-running dispute (5/17)
Dakota Access seeks to intervene in Oglala Sioux Tribe's lawsuit (5/17)
Senate Committee on Indian Affairs approves 3 bills at meeting (5/17)
Indian Health Service and 'high risk' tribal programs on agenda (5/17)
Bureau of Indian Affairs designates service area for Tejon Tribe (5/17)
Ruth Hopkins: Taxpayers footing $15M bill for DAPL private army (5/17)
Matthew Fletcher: Expect litigation after Supreme Court decision (5/17)
more headlines...

Home | Arts & Entertainment | Business | Canada | Cobell Lawsuit | Education | Environment | Federal Recognition | Federal Register | Forum | Health | Humor | Indian Gaming | Indian Trust | Jack Abramoff Scandal | Jobs & Notices | Law | National | News | Opinion | Politics | Sports | Technology | World

Indianz.Com Terms of Service | Indianz.Com Privacy Policy
About Indianz.Com | Advertise on Indianz.Com

Indianz.Com is a product of Noble Savage Media, LLC and Ho-Chunk, Inc.