indianz.com your internet resource indianz.com on facebook indianz.com on twitter indianz.com on Google+ indianz.com on soundcloud
phone: 202 630 8439
Fredericks Peebles & Morgan LLP
Advertise on Indianz.Com
Home > News > Headlines

printer friendly version
Lamberth holds hearing on Indian trust security
Thursday, April 21, 2005

The federal judge handling the Indian trust fund case moved forward with his oversight of the Interior Department's computer systems on Wednesday in light of new reports of vulnerabilities.

U.S. District Judge Royce Lamberth held a two-hour hearing in Washington, D.C., on the state of information technology at the department. It was his first foray into the subject since a federal appeals court last December lifted an order that disconnected the department's computer systems from the Internet.

In recent testimony to Congress, associate deputy secretary Jim Cason characterized the decision as one of the Bush administration's "victories" in the long-running Cobell v. Norton case. But information technology woes continue to plague the department, with an internal report forcing the Bureau of Land Management to shut down its website due to the "poor state of network security."

Lamberth said he was willing to hold an evidentiary hearing and call witnesses -- potentially including Cason -- to get to the heart of the matter. The appeals court cited the lack of such a hearing when it lifted the shutdown order.

Dennis Gingold, an attorney for the Cobell plaintiffs, said he was ready to go to trial on the issue "next week." He told the court that that billions in individual Indian trust funds are at risk to computer hackers unless the relevant computer systems are removed from the Internet and turned off.

"The consequences are terrible," Gingold said. "You can transfer property, you can transfer money, you can order checks" without being detected, he said.

Glenn Gillette, a Department of Justice attorney, didn't immediately object to holding of the evidentiary hearing. But he suggested it should be delayed until both sides can collect more evidence to determine whether the computer systems are secure.

"Clearly, the individual Indian trust data today is more secure than it has been," Gillette told the court. He said the department has spent $100 million over the past three years to install firewalls, redesign the network and take other measures to beef up the systems.

Lamberth indicated he welcomed some of the changes that have been made, including the department's decision to conduct "penetration" tests to identify security gaps. "It's exactly what I was asking to be done" in ordering the shutdown that was lifted by the appeals court, he said.

But he voiced concerns about Interior's continued management of the Indian trust. In fighting the Internet shutdown, the department complained that its day-to-day operations were harmed, a situation that could be avoided if trust and non-trust data were separated.

"Why doesn't Interior keep the trust data in a separate system?" Lamberth asked. "Why do they want to keep the data intermingled?"

Gillette said the department's long-term goal was to keep the data separate but he didn't know when that would be accomplished. Currently, if all of the systems are shut down, "You have almost no ability to do any work," he told the court.

Lamberth also said he had problems with the department's proposal to keep secret the internal report that prompted the BLM shutdown. "I don't think it's fair to the public," he told Interior Secretary Gale Norton's defense team, who have not provided the entire report to the court or to the Cobell plaintiffs but provided a key detail in a filing.

On April 6, the Inspector General at Interior issued a report that outlined the results of a penetration test at an unknown agency. "Given the poor state of network security at [agency] and the weak access controls we encountered on many systems, it is safe to say that we could have easily compromised the confidentiality, integrity, and availability of the identified Indian Trust data residing on those systems," the document stated, according to the filing.

Two days later, Norton's attorneys asked the court to seal the IG report but Lamberth said their proposed order was "overbroad" and would prevent its release in its entirety. "I'm not going to buy an argument like that," he said before asking the lawyers to draft language that would identify which parts of the report might be redacted and under what standard.

In their filings, Norton's attorneys refused to discuss further details of the security vulnerabilities. But shortly afterward, two computer-related publications reported that the BLM was the agency at issue.

Gillette yesterday did offer additional information when pressed by the court. He said the penetration test found problems with a BLM e-mail server and "other associated servers" that he didn't identify. He said the systems failed due to a lack of "adequate encryption and password protection."

"This penetration test was run under a program initiated by Interior," he told Lamberth. "This testing is well beyond the normal standard done for [similar] systems."

The contractors hired by the IG were able to exploit the vulnerabilities and "get into BLM systems," Gillette acknowledged. "These folks were good," he said, suggesting that an ordinary hacker would not be able to compromise the network.

The IG has issued similar penetration test reports for the Bureau of Indian Affairs, Office of Special Trustee and Office of Hearings and Appeals, and issued another one for the National Business Center in Denver just two days ago, Gillette said. Similar tests are underway for the Minerals Management System, which handles $6 billion in Indian and other royalties a year.

Information technology surfaced as an issue in November 2001 when the former special master in the case hired a computer security firm that was able to break into the Indian trust systems easily. The discovery led to the first Internet shutdown a month later.

Since then, the overwhelming majority of the department's computer systems are back online. The only major exception is the Bureau of Indian Affairs.

The Bush administration, however, has continued to dispute whether Lamberth has the authority to oversee the computer systems. The D.C. Circuit Court of Appeals lifted the most recent shutdown order but supported Lamberth and the Cobell plaintiffs on this point.

"It is indisputable that the Secretary has current and prospective trust management duties that necessitate maintaining secure IT systems in order to render accurate accountings now and in the future," the court said.

Relevant Links:
Indian Trust: Cobell v. Norton - http://www.indiantrust.com
Cobell v. Norton, Department of Justice - http://www.usdoj.gov/civil/cases/cobell/index.htm
Indian Trust, Department of Interior - http://www.doi.gov/indiantrust

Related Stories:
Lamberth schedules hearing on computer systems (4/20)
Norton blocking information technology report (4/18)
Appeals court supports Lamberth's authority on IT (12/06)
Lamberth critical of Norton's 'bad faith' on trust fund (10/25)
NCAI 04 Wrapup: Day 2 (10/13)
Interior denies attempt to halt trust fund payments (10/05)
Swimmer: Communication with account holders on hold (10/04)
Bush administration challenges trust fund ruling (09/16)
Appeals court takes on Cobell trust fund case (9/15)
Richardson pushes Norton to protect trust fund (08/16)
Small percentage of Interior's IT systems secure (08/10)
Johnson promises 'meaningful' investigation of OST (06/21)
BIA takes advantage of Internet shutdown (05/11)
DOI's Internet connection shut down for third time (03/16)
BIA shows off information technology facility (3/2)
Anderson touts benefits of Cobell trust fund case (02/25)
Lamberth orders DOI to turn over IT reports (12/12)
DOI fares poorly on computer security report card (12/11)
Judge seeks to break impasse over trust systems (07/29)
BIA incident prompts high-level recommendation (03/27)
Court report blasts McCaleb for destroying records (01/27)
Court: McCaleb 'fabricated' e-mail story (1/24)
BIA aides circumventing court (12/16)
Martin's role in incident surfaces (12/16)
BIA aides e-mail use prompts inquiry (12/17)
McCaleb admits to e-mail 'misunderstanding' (10/23)
Burns takes on BIA problems in stride (08/23)
McCaleb gets new computer official (6/5)
Retaliation charged as BIA official jumps ship (7/25)

Copyright 2000-2005 Indianz.Com
More headlines...
Stay Connected:
On Facebook

On Twitter

On Google+

On SoundCloud
Local Links:
Federal Register | Indian Gaming | Jobs & Notices | In The Hoop | Message Board
Latest News:
Tribes rest easy as Supreme Court wraps up a surprising session (6/24)
Tribes in northern California take action to protect salmon runs (6/24)
Aaron Payment re-elected as chairman of Sault Ste. Marie Tribe (6/24)
Gun Lake Tribe hosts annual Sweet Grass Moon Powwow in July (6/24)
Native Sun News: First Native hockey referee 'Butchy' passes on (6/24)
Delphine Red Shirt: Lakota people denied voting rights on our land (6/24)
Ruth Hopkins: Saving sacred Bear Butte from a massive biker bar (6/24)
Terese Mailhot: Becoming a better ally after the Orlando shooting (6/24)
April Youpee-Roll: Elizabeth Warren owes more to Indian Country (6/24)
Another land-into-trust fix reportedly being drafted in the Senate (6/24)
Federal charges filed in kidnapping of girl on Fort Peck Reservation (6/24)
Non-Indian charged for trespassing at Nambe Pueblo in New Mexico (6/24)
St. Croix Chippewa Tribe warned not to launch marijuana operation (6/24)
Eastern Shawnee Tribe breaks ground on $34M expansion at casino (6/24)
Non-Indian gaming firm loses challenge to law for new tribal casino (6/24)
Grand Ronde Tribes to finish demolition work at site of old racetrack (6/24)
Supreme Court deadlocks in closely-watched tribal jurisdiction case (6/23)
Matthew Fletcher: 'Huge win' for Mississippi Choctaw court system (6/23)
Native American Basketball Invitational draws top talent to Arizona (6/23)
Cheyenne River Sioux Tribe almost done with long-awaited theater (6/23)
Susanville Rancheria thanks lawmakers for help with land-into-trust (6/23)
Senate Committee on Indian Affairs schedules hearing on three bills (6/23)
Supreme Court backs affirmative action policy in long-running case (6/23)
Native Sun News: Senate committee takes on Indian Health Service (6/23)
Mark Trahant: A Republican plan to terminate Indian Health Service (6/23)
James Giago Davies: Welfare for corporations but nothing for tribes (6/23)
Peter d'Errico: Justice Clarence Thomas critiques federal Indian law (6/23)
Two charged for beating and setting woman from Crow Tribe on fire (6/23)
White House defends fracking regulation imposed on Indian lands (6/23)
Mescalero Apache woman hosts fundraiser for Miss United States (6/23)
Standing Rock Sioux Tribe to collect sales tax on entire reservation (6/23)
Seneca-Cayuga Nation ordered to conduct another council election (6/23)
Poarch Creek land-into-trust bill could help casino effort in Florida (6/23)
Cherokee Nation enters deal to run commercial casino in Arkansas (6/23)
Tohono O'odham Nation told to turn over casino-related documents (6/23)
Senate Indian Affairs Committee debates marijuana & sovereignty (6/22)
Major trust reform bill supported by Indian Country signed into law (6/22)
President Obama signs land-into-trust bill for Susanville Rancheria (6/22)
Chairman Jim Boyd from Colville Tribes passes away at age of 60 (6/22)
Tribes take more control of their land with HEARTH Act regulations (6/22)
Shakopee Mdewakanton Sioux Community adds another 128 acres (6/22)
Lakota Country Times: Pine Ridge Reservation graduates celebrate (6/22)
Native Sun News: Year of Reconciliation sees another anniversary (6/22)
Former Fond du Lac Band chairman Peter Defoe passes on at 77 (6/22)
more headlines...

Home | Arts & Entertainment | Business | Canada | Cobell Lawsuit | Education | Environment | Federal Recognition | Federal Register | Forum | Health | Humor | Indian Gaming | Indian Trust | Jack Abramoff Scandal | Jobs & Notices | Law | National | News | Opinion | Politics | Sports | Technology | World

Indianz.Com Terms of Service | Indianz.Com Privacy Policy
About Indianz.Com | Advertise on Indianz.Com

Indianz.Com is a product of Noble Savage Media, LLC and Ho-Chunk, Inc.