Michigan in cyber-security partnership with DHS

In a move that could change security monitoring for states nationwide, Michigan announced it will deploy the federal government’s network monitoring system EINSTEIN 1. The system, which all federal agencies are required to use, is run by DHS.

Govtech’s Andy Opsahl writes that the federal-state partnership is the first of its kind, which Michigan governor Jennifer Granholm hopes will increase the types of cyber-threats Michigan can detect. The project could have implications for similar ones in others states in the future. “It will enable greater federal and state coordination to promote mutual cyber-security interests and, if successful, will inform the efforts of state governments to enhance their own cyber-security efforts,” Granholm said in a statement.

Michigan’s collaboration with DHS will include services from the agency’s U.S. Computer Emergency Readiness Team (US-CERT), which will identify possible abnormal activities on Michigan’s networks and address threats to the cyber-infrastructure.

EINSTEIN 1 automates the collection and analysis of computer network security information from participating agency and government networks to help analysts identify and combat malicious cyber-activity that may threaten government network systems, data protection and communications infrastructure.

In 2008 DHS updated the system, adding automation and a real-time reporting function. At the same time, the George W. Bush administration mandated that all federal agencies use it. Time will show whether those improvements translate to best practices for state network monitoring.

The updated version of the program — Einstein 3 – has raised privacy concerns (see “Einstein 3 Raises Privacy Concerns,” 8 September 2009 HSNW, and “DHS’s Einstein 3 Plans Raise Questions,” 9 July 2009 HSNW)