Re: FBI's InfraGard

[George Jones <gmj () infinet com>]

I've been involved to some degree in the local (Columbus, OH) Infragard
meetings.  The primary value I've seen is in the the people-networking,
and in bringing together the technical and non-technical (e.g. law
enforcment)
crowds in a local community.  As with anything, you generaly get out
what
you put in.

George Jones
Email: gmj () infinet com, Snail Mail: Box 529, London, Ohio 43140
Voice: +1 740 852 3242 (h),+1 614 723 4560 (w) Web: www.infinet.com/~gmj

PGP: 1024/8C1CEFC9 Fingerprint 20 79 AE 12 D0 8C 44 8F C5 37 2B 40 EA F5
C3 35


---------- Forwarded message ----------
Date: Wed, 28 Apr 1999 08:59:08 -0400
From: George Jones <gjones () lab fcnbd com>
To: gmj () infinet com
Subject: Fwd: firewall-wizards Archive: Re: FBI's InfraGard]

William Yang wrote:

> George Jones wrote something like:
>
> > From the Firewall-wizards mailing list.  Comments ?
> >
> > ---George
>
> Thanks for the note, George.  Feel free to repost this as you see fit:

> I can field the questions or refer them to the board for resolution.
>
> > > Vin McLellan (vin () shore net)
> > > Mon, 19 Apr 1999 12:00:40 -0400
>
> > > I'm told that InfraGard is simply a networked attempt to
> > > organize the FBI's Ole Boy Network -- the retired ex-FBI agents who
are
> > > expected to be more loyal to the Bureau than they are to their
current
> > > corporate employers.
> > >
> > > They wire the old ex-Feebees into a privileged rumor network in the

> > > hope that they will more readily toss in tips and rumors about IT
attacks
> > > and threats -- if not about their own employers, then about
competitors, the
> > > brother-in-law's firm, stories they heard at the bar, etc.
> > >
> > > They are getting desperate to hear about the sort of attacks that
no
> > > corporate officer in his right mind is gonna report to the Bureau.
>
> The provisional National Executive board consists of exactly *NO*
> former FBI agents or affiliates, though there is a single FBI
> representative who is on the Executive board (as our liason to the
> FBI).  I'm one of the five elected representatives from private
> companies who actually are on the board for National Infragard.  The
> board currently consists of five people and one FBI rep.
>
> I shouldn't be be considered an FBI anything, as I work for the Ohio
> Supercomputer Center (which is funded through the Board of Regents of
> the State of Ohio, *not* the Federal government).  I am not, never
> have been, and currently do not plan to ever become, an agent or
> officer of any law enforcement agency.  As for the board, exactly none

> of them are or ever have been members of any law enforcement community

> (unless they're sworn to secrecy with some kind of upon-pain-of-death
> oath to never betray the secrets of their law enforcement past!  >;-).

> Infragard is made up of IT security managers and security engineers,
> working with law enforcement because we want our police to actually
> protect us the way they're charged to!  We also agree that security
> issues cross corporate lines too easily: we need to be able to work
> together to facilitate the resolution of security problems, and
> Infragard is an expedient way to get to know who works where, to build

> some trust and some professional relationships that will be mutually
> beneficial.
>
> The "privileged rumor network" is only a small part of the Infragard
> program, though it is the most tangible in terms of understandability
> to the (marginally clued) press.
>
> Some people may distrust the FBI's motives, and I'm not going to
> debate what's going through the minds of the decision-makers at the
> FBI.  However, the facts (as seen from the inside) indicate that this
> is a product of scurrilous rumor and outrageous innuendo.  The
> analysis above is patently false and completely unfounded.
>
> > >         InfraGard is probably only one of several parallel efforts
to get
> > > various classes of professionals to place the FBI's bureaucratic
interests
> > > above the interests of their employers or clients. Things like this
are
> > > the price paid for putting the Infrastructure Protection Center in
such a
> > > reactive agency, in the hands of guys always working to boost their
arrest
> > > count-- rather somewhere it could generally enhance and foster
strong
> > > security among, respectively, venders and users.
>
> I can't speak as to whether or not the FBI is trying to put their
> "bureaucratic interests above the interests of" anyone.  I won't
> allege that I'm "in the know" about the inner workings of a large law
> enforcement organization.  I don't get top secret memos or media leaks

> from the FBI, and I don't analyze their budget or their declassified
> or public records.  Frankly, I have better things to do with my time.
>
> I can, however, point out that Infragard membership is voluntary, and
> there's nothing to keep people in the organization if they don't like
> the benefits or any of the factors that relate to how the organization

> works.  Rather than make broad allegations from ignorance, it may be
> more profitable to seek accurate and valid information about the
> program and see whether it fits the needs of your organization.
>
>         -Bill
> --
> William Yang
> wyang () gcfn net