Internet kill switch

Last updated

An Internet kill switch is a countermeasure concept of activating a single shut off mechanism for all Internet traffic.

Contents

The concept behind having a kill switch is based on creating a single point of control (i.e. a switch) for a single authority to control or shut down the Internet in order to protect it or its users. Because of infrastructure and society's dependence on internet today, including critical infrastructure and services (e.g. health care emergencies, traffic, etc.) an internet kill switch can easily and clearly be deemed collective punishment. [1] Therefore, In the United States, groups such as the American Civil Liberties Union have criticized proposals for implementing the idea so far. [2]

China

China completely shut down Internet service in the autonomous region of Xinjiang from July 2009 to May 2010 for up to 312 days after the July 2009 Ürümqi riots. [3] [ better source needed ] [4] [5]

Egypt

On January 27, 2011, during the Egyptian Revolution of 2011, the government of President Hosni Mubarak cut off access to the Internet by all four national ISPs, and all mobile phone networks. [6] [7] This version of a kill switch was effected by a government-ordered shutdown of the Egyptian-run portion of the Domain Name System, and Border Gateway Protocol (BGP), making transmission of Internet traffic impossible for Egyptian ISPs. All network traffic ceased within two hours, according to Arbor Networks. [6]

India

India sometimes terminates Internet connections in Kashmir [8] and northeastern states.

Iran

The Iranian Government activated the internet kill switch during the 2019–2020 Iranian Protests to prevent the organization of new protests. [9]

Turkey

In June 2016, Turkey introduced an Internet kill switch law permitting authorities to "partially or entirely" suspend Internet access due to wartime measures, national security or public order. [10] The mechanism came to attention when Internet monitoring group Turkey Blocks detected a nationwide slowdown affecting several social network services on the eve of a major offensive during the 2016 Turkish military intervention in Syria. [11] Similar Internet restrictions had previously been implemented during national emergencies to control the flow of information in the aftermath of terrorist attacks, originally without any clear legal grounding.

United Kingdom

In the United Kingdom, the Communications Act 2003 and the Civil Contingencies Act 2004 allow the Secretary of State for Culture, Media and Sport to suspend Internet services, either by ordering Internet service providers to shut down operations or by closing Internet exchange points. [7] A representative of the Department for Culture, Media and Sport said in 2011 that:

It would have to be a very serious threat for these powers to be used, something like a major cyber attack. The powers are subject to review and if it was used inappropriately there could be an appeal to the competitions appeal tribunal. Any decision to use them would have to comply with public law and the Human Rights Act. [7]

Dr. Peter Gradwell, a trustee of the Nominet Trust, criticized the provisions in the Communications Act:

The legislation also includes the requirement to make compensatory payments for loss or damage. Would the Government want to foot the bill for switching off a multi- billion-pound industry? If a notice is served on an ISP and ignored, the penalty is only a fine. If the public were massing on the streets of London, I believe that many internet providers would be happy to argue the legitimacy of such a penalty in court. [7]

United States

History

The prospect of cyberwarfare during the 2000s has prompted the drafting of legislation by US officials, but worldwide the implications of actually "killing" the Internet has prompted criticism of the idea in the United States. During the Arab Spring in Tunisia, Egypt, and Libya access to the Internet was denied [12] in an effort to limit peer networking to facilitate organization. While the effects of shutting off information access are controversial, the topic of a kill switch does remain to be resolved.

Communications Act of 1934

The Communications Act of 1934 established the US federal government’s regulation of electronic communications by the Federal Communications Commission (FCC). This act, created by the Franklin D. Roosevelt administration, gave the president powers of control over the media under certain circumstances. This act was the basis of regulatory power for the executive branch of the government to control electronic communications in the United States.

Telecommunications Act of 1996

Presidential Decision Directive 63 (PDD-63), signed in May 1998, established a structure under White House leadership to coordinate the activities of designated lead departments and agencies, in partnership with their counterparts from the private sector, to "eliminate any significant vulnerability to both physical and cyber attacks on our critical infrastructures, including especially our cyber systems". [13]

Proposed Protecting Cyberspace as a National Asset Act of 2010

On June 19, 2010, Senator Joe Lieberman (I-CT) introduced the Protecting Cyberspace as a National Asset Act, [14] which he co-wrote with Senator Susan Collins (R-ME) and Senator Thomas Carper (D-DE). If signed into law, this controversial bill, which the American media dubbed the kill switch bill, would have granted the President emergency powers over the Internet. Other parts of the bill focused on the establishment of an Office of Cyberspace Policy and on its missions, as well as on the coordination of cyberspace policy at the federal level.

The American Civil Liberties Union (ACLU) criticized the scope of the legislation in a letter to Senator Lieberman signed by several other civil liberty groups. [15] Particularly, they asked how the authorities would classify what is critical communications infrastructure (CCI) and what is not, and how the government would preserve the right of free speech in cybersecurity emergencies. An automatic renewal provision within the proposed legislation would keep it going beyond thirty days. The group recommended that the legislation follows a strict First Amendment scrutiny test.

All three co-authors of the bill subsequently issued a statement claiming that the bill "[narrowed] existing broad Presidential authority to take over telecommunications networks", [16] and Senator Lieberman contended that the bill did not seek to make a 'kill switch' option available ("the President will never take over – the government should never take over the Internet"), [16] but instead insisted that serious steps had to be taken in order to counter a potential mass scale cyber attack. The Protecting Cyberspace as a National Asset Act of 2010 expired at the end of the 2009–2010 Congress without receiving a vote from either chamber. [17]

Implementation issues

The logistics of implementing an Internet kill switch in a multi-tenant data center can be very complex. In Floor Patch Panel Cat6.jpg
The logistics of implementing an Internet kill switch in a multi-tenant data center can be very complex.

There are several issues that may prevent a system to be established in the United States. The Telecommunications Act of 1996 deregulated the telecommunications market and allowed for the growth of data carrier services. Since the Federal Communications Commission (FCC) does not require registration of a company as an Internet service provider (ISP), there are only estimates available based on publicly available data. The FCC estimated in April 2011 that there were over 7,800 ISPs [18] operating in the United States. This makes implementation of a kill switch that much more difficult: each company would have to voluntarily comply. There is no law that gives the United States authority over an ISP without a court order.

A court order is not necessarily the solution either. Even if an ISP is forced by court order, the attack may have already taken place and the prophylactic methods too late in implementing. There are thousands of ISPs and since they do not have to register, there is no known way of contacting them in time and forcing the ISP to comply.

The regulations[ which? ] that the United States uses to regulate the information and data industry may have inadvertently made a true "Internet kill switch" impossible. The lack of regulation allowed for building of a patch-work system (ISPs, Internet backbone) that is extremely complex and not fully known.[ clarification needed ]

In the United States, there are strong[ clarification needed ] citizen and business protection systems.[ clarification needed ] There is redress of grievances allowed to the courts or administrative authority.[ which? ] There is also the need for a court order for the government to shut off services. In addition to these fairly large roadblocks, there are human rights groups such as the ACLU, Amnesty International, and others. All of these reasons make implementing the Internet kill switch difficult.

Policy issues

Two key policy issues [19] are whether or not the United States has the right constitutionally to restrict or cut off access to the Internet, and whether this might open end users to hackery. The powers granted to the presidency starting with the Communications Act of 1934 seem to be adequate[ to whom? ] in dealing with this threat, and is one of the major criticisms[ by whom? ] of legislation determined to regulate this question. The next most important question[ to whom? ] is whether or not the United States even need this legislation or it would chip away[ clarification needed ] at individual liberties. The trade offs are apparent[ to whom? ] – if the government can control information online then it can limit access to information online. One of the biggest problems[ to whom? ] with the theory is what to classify as critical communications infrastructure and what to leave out.

Legislators have to take into account the cost of shutting down the Internet, if it is even possible. The loss of the network for even a day could cost billions of dollars in lost revenue. The National Cybersecurity Center was set up to deal with these questions, to research threats and design and recommend prophylactic methods.

In many ways,[ which? ] the integration of networked computer-mediated communication systems into users' business and personal lives means that potential cybersecurity threats are increasing along with the potential problem of protecting a wide class of products, such as the Internet of things. Utility systems can be monitored and controlled remotely and no longer require the physical presence of a maintainer. So the issue of what an Internet kill switch could affect is growing steadily.[ clarification needed ]

A 2009 White House Assessment stated that there needed to be more work done on this issue and the National Cybersecurity Center was created to handle security issues. [13] It is not publicly known at this point if the Center has a policy regarding asserting control of the national networks.

Zimbabwe

On January 15, 2019, internet monitoring group NetBlocks reported the blocking of over a dozen social media platforms in Zimbabwe followed by a wider internet blackout amid protests over the price of fuel. [20] [21] The first three days of the disruption cost the Zimbabwe's economy an estimated $17 million as the government extended its disruption to a full shutdown to prevent the use of VPN circumvention tools by demonstrators. [22]

See also

Related Research Articles

The Communications Decency Act of 1996 (CDA) was the United States Congress's first notable attempt to regulate pornographic material on the Internet. In the 1997 landmark case Reno v. ACLU, the United States Supreme Court unanimously struck the act's anti-indecency provisions.

<span class="mw-page-title-main">Internet backbone</span> Vital infrastructure of the networks of the Internet

The Internet backbone is the principal data routes between large, strategically interconnected computer networks and core routers of the Internet. These data routes are hosted by commercial, government, academic and other high-capacity network centers as well as the Internet exchange points and network access points, which exchange Internet traffic internationally. Internet service providers (ISPs) participate in Internet backbone traffic through privately negotiated interconnection agreements, primarily governed by the principle of settlement-free peering.

Internet censorship in Australia is enforced by both the country's criminal law as well as voluntarily enacted by internet service providers. The Australian Communications and Media Authority (ACMA) has the power to enforce content restrictions on Internet content hosted within Australia, and maintain a blocklist of overseas websites which is then provided for use in filtering software. The restrictions focus primarily on child pornography, sexual violence, and other illegal activities, compiled as a result of a consumer complaints process.

<span class="mw-page-title-main">Internet governance</span> System of laws, policies and practices

Internet governance consists of a system of laws, rules, policies and practices that dictate how its board members manage and oversee the affairs of any internet related-regulatory body. This article describes how the Internet was and is currently governed, some inherent controversies, and ongoing debates regarding how and why the Internet should or should not be governed in the future.

A cybersecurity regulation comprises directives that safeguard information technology and computer systems with the purpose of forcing companies and organizations to protect their systems and information from cyberattacks like viruses, worms, Trojan horses, phishing, denial of service (DOS) attacks, unauthorized access and control system attacks. While cybersecurity regulations aim to minimize cyber risks and enhance protection, the uncertainty arising from frequent changes or new regulations can significantly impact organizational response strategies.

<span class="mw-page-title-main">Bill Woodcock</span> Internet infrastructure pioneer (born 1971)

Bill Woodcock is the executive director of Packet Clearing House, the international organization responsible for providing operational support and security to critical Internet infrastructure, including Internet exchange points and the core of the domain name system; the chairman of the Foundation Council of Quad9; the president of WoodyNet; and the CEO of EcoTruc and EcoRace, companies developing electric vehicle technology for work and motorsport. Bill founded one of the earliest Internet service providers, and is best known for his 1989 development of the anycast routing technique that is now ubiquitous in Internet content distribution networks and the domain name system.

In the United States, net neutrality—the principle that Internet service providers (ISPs) should make no distinctions between different kinds of content on the Internet, and to not discriminate based on such distinctions—has been an issue of contention between end-users and ISPs since the 1990s. With net neutrality, ISPs may not intentionally block, slow down, or charge different rates for specific online content. Without net neutrality, ISPs may prioritize certain types of traffic, meter others, or potentially block specific types of content, while charging consumers different rates for that content.

Internet censorship in the United States is the suppression of information published or viewed on the Internet in the United States. The First Amendment of the United States Constitution protects freedom of speech and expression against federal, state, and local government censorship.

The Internet is accessible to the majority of the population in Egypt, whether via smartphones, internet cafes, or home connections. Broadband Internet access via VDSL is widely available.

The Internet in Kazakhstan is growing rapidly. Between 2001 and 2005, the number of Internet users increased from 200,000 to 1 million. By 2007, Kazakhstan reported Internet penetration levels of 8.5 percent, rising to 12.4 percent in 2008 and 34.3% in 2010. By 2013, Kazakhstani officials reported Internet penetration levels of 62.2 percent, with about 10 million users. There are five first-tier ISPs with international Internet connections and approximately 100 second-tier ISPs that are purchasing Internet traffic from the first-tier ISPs. As of 2019, more than 75% of Kazakhstan's population have access to the internet, a figure well ahead of any other country in Central Asia. The Internet consumption in the country rose from 356 PB in 2018 to 1,000 PB in 2022.

The Protecting Cyberspace as a National Asset Act of 2010 is a bill introduced in the United States Senate by Joe Lieberman, Susan Collins, and Tom Carper on June 10, 2010. The stated purpose of the bill was to increase security in cyberspace and prevent attacks which could disable infrastructure such as telecommunications or disrupt the nation's economy. The legislation would have created an Office of Cyberspace Policy and a National Center for Cybersecurity and Communications.

Cyberwarfare is the use of computer technology to disrupt the activities of a state or organization, especially the deliberate attacking of information systems for strategic or military purposes. As a major developed economy, the United States is highly dependent on the Internet and therefore greatly exposed to cyber attacks. At the same time, the United States has substantial capabilities in both defense and power projection thanks to comparatively advanced technology and a large military budget. Cyber warfare presents a growing threat to physical systems and infrastructures that are linked to the internet. Malicious hacking from domestic or foreign enemies remains a constant threat to the United States. In response to these growing threats, the United States has developed significant cyber capabilities.

<span class="mw-page-title-main">Combating Online Infringement and Counterfeits Act</span>

United States Senate Bill S.3804, known as the Combating Online Infringement and Counterfeits Act (COICA) was a bill introduced by Senator Patrick Leahy (D-VT) on September 20, 2010. It proposed amendments to Chapter 113 of Title 18 of the United States Code that would authorize the Attorney General to bring an in rem action against any domain name found "dedicated to infringing activities," as defined within the text of the bill. Upon bringing such an action, and obtaining an order for relief, the registrar of, or registry affiliated with, the infringing domain would be compelled to "suspend operation of and lock the domain name."

There is no commonly agreed single definition of “cybercrime”. It refers to illegal internet-mediated activities that often take place in global electronic networks. Cybercrime is "international" or "transnational" – there are ‘no cyber-borders between countries'. International cybercrimes often challenge the effectiveness of domestic and international law, and law enforcement. Because existing laws in many countries are not tailored to deal with cybercrime, criminals increasingly conduct crimes on the Internet in order to take advantages of the less severe punishments or difficulties of being traced.

<span class="mw-page-title-main">Cyber Intelligence Sharing and Protection Act</span> Unpassed United States bill

The Cyber Intelligence Sharing and Protection Act was a proposed law in the United States which would allow for the sharing of Internet traffic information between the U.S. government and technology and manufacturing companies. The stated aim of the bill is to help the U.S. government investigate cyber threats and ensure the security of networks against cyberattacks.

The level of Internet censorship in the Arab Spring was escalated. Lack of Internet freedom was a tactic employed by authorities to quell protests. Rulers and governments across the Arab world utilized the law, technology, and violence to control what was being posted on and disseminated through the Internet. In Egypt, Libya, and Syria, the populations witnessed full Internet shutdowns as their respective governments attempted to quell protests. In Tunisia, the government of Zine El Abidine Ben Ali hacked into and stole passwords from citizens' Facebook accounts. In Saudi Arabia and Bahrain, bloggers and "netizens" were arrested and some are alleged to have been killed. The developments since the beginning of the Arab Spring in 2010 have raised the issue of Internet access as a human right and have revealed the type of power certain authoritarian governments retain over the people and the Internet.

<span class="mw-page-title-main">National Cybersecurity and Critical Infrastructure Protection Act of 2013</span>

The National Cybersecurity and Critical Infrastructure Protection Act of 2013 is a bill that would amend the Homeland Security Act of 2002 to require the Secretary of the Department of Homeland Security (DHS) to conduct cybersecurity activities on behalf of the federal government and would codify the role of DHS in preventing and responding to cybersecurity incidents involving the Information Technology (IT) systems of federal civilian agencies and critical infrastructure in the United States.

<span class="mw-page-title-main">Network sovereignty</span> Effort to create boundaries on a network

In internet governance, network sovereignty, also called digital sovereignty or cyber sovereignty, is the effort of a governing entity, such as a state, to create boundaries on a network and then exert a form of control, often in the form of law enforcement over such boundaries.

<span class="mw-page-title-main">Cybersecurity Information Sharing Act</span>

The Cybersecurity Information Sharing Act is a United States federal law designed to "improve cybersecurity in the United States through enhanced sharing of information about cybersecurity threats, and for other purposes". The law allows the sharing of Internet traffic information between the U.S. government and technology and manufacturing companies. The bill was introduced in the U.S. Senate on July 10, 2014, and passed in the Senate on October 27, 2015. Opponents question CISA's value, believing it will move responsibility from private businesses to the government, thereby increasing vulnerability of personal private information, as well as dispersing personal private information across seven government agencies, including the NSA and local police.

The Email Privacy Act is a bill introduced in the United States Congress. The bipartisan proposed federal law was sponsored by Representative Kevin Yoder, a Republican from Kansas, and then-Representative Jared Polis, a Democrat of Colorado. The law is designed to update and reform existing online communications law, specifically the Electronic Communications Privacy Act (ECPA) of 1986.

References

  1. ↑ "Shutting Down the Internet to Shut Up Critics". Human Rights Watch. Retrieved 16 June 2024.
  2. ↑ Cohen, Adam (11 August 2010). "The Internet Kill-Switch Debate: Aims of Bill Unclear - TIME". Time.
  3. ↑ Rauhala, Emily (2011-01-28). "Did Egypt Really 'Shut Off' the Internet?". TIME . Retrieved 2019-12-16.
  4. ↑ "Democratic Republic of Congo internet shutdown shows how Chinese censorship tactics are spreading". CNN. 2019-01-02. Retrieved 2019-12-16.
  5. ↑ "China's Xinjiang surveillance is the dystopian future nobody wants". engadget. 2018-02-22. Retrieved 2019-12-17.
  6. 1 2 "Egyptian Revolt Unquelled By Total Comms Blackout". TechWeek . January 28, 2011.
  7. 1 2 3 4 "Could the UK Government shut down the web?". The Independent . March 8, 2011.
  8. ↑ "JK is No. 1 in enforcing Internet blockade?". Greater Kashmir. 2017-04-05. Retrieved 2017-05-17.
  9. ↑ Hamilton, Isobel Asher. "Iran has been cut off from the internet for almost 72 hours". Business Insider. Retrieved 2020-06-02.
  10. ↑ "Social media blocked in Turkey". Turkey Blocks. 2016-08-25. Retrieved 2017-05-17.
  11. ↑ "Did Turkey Test Its Wartime Censorship Capabilities?". The Daily Dot. 2016-08-27. Retrieved 2017-05-17.
  12. ↑ Dainotti et al., Analysis of Country-wide Internet Outages Caused by Censorship, ACM, 2011
  13. 1 2 "Cyberspace Policy Review" (PDF). USA Government. 2009. Archived from the original (PDF) on 2011-04-24.
  14. ↑ "Protecting Cyberspace as a National Asset Act of 2010". U.S. Congress. 15 December 2010.
  15. ↑ American Civil Liberties Union (23 June 2010). "Civil Liberties Issues in Cybersecurity Bill" (PDF).
  16. 1 2 Hoover, J. Nicholas (24 June 2010). "Senators Say Cybersecurity Bill Has No 'Kill Switch'". informationweek.com. Retrieved 25 June 2010.
  17. ↑ Status of S.3480, 111th Congress Archived 2016-01-31 at the Wayback Machine , Status of H.R.5548, 111th Congress [ permanent dead link ]
  18. ↑ "Consumer Advisory Committee meeting" (DOCX). Federal Communications Commission. August 2, 2013.
  19. ↑ Joe Pinsker (August 29, 2014). "The Harsh, Polarizing Language of a 'Kill Switch' for Smartphones: Is there a better way to talk about a feature that will allow cellphones to be shut down remotely?". Atlantic Magazine . Retrieved January 5, 2022.
  20. ↑ "Zimbabwe Internet shutdowns amid fuel price protests". NetBlocks. 2019-01-15. Retrieved 2019-01-24.
  21. ↑ Cotterill, Joseph (15 January 2019). "Zimbabwe cracks down violently on fuel protesters". Financial Times.
  22. ↑ Analysis by James Griffiths (18 January 2019). "The internet is more vulnerable than you realize". CNN. Retrieved 2019-01-24.
This page is based on this Wikipedia article
Text is available under the CC BY-SA 4.0 license; additional terms may apply.
Images, videos and audio are available under their respective licenses.