Skip to main content

It's time to break up the NSA

By Bruce Schneier
updated 6:40 PM EST, Thu February 20, 2014
STORY HIGHLIGHTS
  • Director of national intelligence said U.S. should have acknowledged surveillance
  • Bruce Schneier: NSA is too big and powerful; it's time to break up the agency
  • He says all bulk surveillance of Americans should be moved to the FBI
  • Schneier: Instead of working to weaken security, NSA should try to improve security for all

Editor's note: Bruce Schneier is a security technologist and author of "Liars and Outliers: Enabling the Trust Society Needs to Thrive."

(CNN) -- The NSA has become too big and too powerful. What was supposed to be a single agency with a dual mission -- protecting the security of U.S. communications and eavesdropping on the communications of our enemies -- has become unbalanced in the post-Cold War, all-terrorism-all-the-time era.

Putting the U.S. Cyber Command, the military's cyberwar wing, in the same location and under the same commander, expanded the NSA's power. The result is an agency that prioritizes intelligence gathering over security, and that's increasingly putting us all at risk. It's time we thought about breaking up the National Security Agency.

Broadly speaking, three types of NSA surveillance programs were exposed by the documents released by Edward Snowden. And while the media tends to lump them together, understanding their differences is critical to understanding how to divide up the NSA's missions.

Bruce Schneier
Bruce Schneier

The first is targeted surveillance.

This is best illustrated by the work of the NSA's Tailored Access Operations (TAO) group, including its catalog of hardware and software "implants" designed to be surreptitiously installed onto the enemy's computers. This sort of thing represents the best of the NSA and is exactly what we want it to do. That the United States has these capabilities, as scary as they might be, is cause for gratification.

The second is bulk surveillance, the NSA's collection of everything it can obtain on every communications channel to which it can get access. This includes things such as the NSA's bulk collection of call records, location data, e-mail messages and text messages.

This is where the NSA overreaches: collecting data on innocent Americans either incidentally or deliberately, and data on foreign citizens indiscriminately. It doesn't make us any safer, and it is liable to be abused. Even the director of national intelligence, James Clapper, acknowledged that the collection and storage of data was kept a secret for too long.

Sen. Paul: NSA lawsuit not a stunt
Greenwald: I will definitely come back

The third is the deliberate sabotaging of security. The primary example we have of this is the NSA's BULLRUN program, which tries to "insert vulnerabilities into commercial encryption systems, IT systems, networks and endpoint communication devices." This is the worst of the NSA's excesses, because it destroys our trust in the Internet, weakens the security all of us rely on and makes us more vulnerable to attackers worldwide.

That's the three: good, bad, very bad. Reorganizing the U.S. intelligence apparatus so it concentrates on our enemies requires breaking up the NSA along those functions.

First, TAO and its targeted surveillance mission should be moved under the control of U.S. Cyber Command, and Cyber Command should be completely separated from the NSA. Actively attacking enemy networks is an offensive military operation, and should be part of an offensive military unit.

Whatever rules of engagement Cyber Command operates under should apply equally to active operations such as sabotaging the Natanz nuclear enrichment facility in Iran and hacking a Belgian telephone company. If we're going to attack the infrastructure of a foreign nation, let it be a clear military operation.

Second, all surveillance of Americans should be moved to the FBI.

The FBI is charged with counterterrorism in the United States, and it needs to play that role. Any operations focused against U.S. citizens need to be subject to U.S. law, and the FBI is the best place to apply that law. That the NSA can, in the view of many, do an end-run around congressional oversight, legal due process and domestic laws is an affront to our Constitution and a danger to our society. The NSA's mission should be focused outside the United States -- for real, not just for show.

And third, the remainder of the NSA needs to be rebalanced so COMSEC (communications security) has priority over SIGINT (signals intelligence). Instead of working to deliberately weaken security for everyone, the NSA should work to improve security for everyone.

Computer and network security is hard, and we need the NSA's expertise to secure our social networks, business systems, computers, phones and critical infrastructure. Just recall the recent incidents of hacked accounts -- from Target to Kickstarter. What once seemed occasional now seems routine. Any NSA work to secure our networks and infrastructure can be done openly -- no secrecy required.

This is a radical solution, but the NSA's many harms require radical thinking. It's not far off from what the President's Review Group on Intelligence and Communications Technologies, charged with evaluating the NSA's current programs, recommended. Its 24th recommendation was to put the NSA and U.S. Cyber Command under different generals, and the 29th recommendation was to put encryption ahead of exploitation.

I have no illusions that anything like this will happen anytime soon, but it might be the only way to tame the enormous beast that the NSA has become.

Follow @CNNOpinion on Twitter.

Join us at Facebook/CNNOpinion.

The opinions expressed in this commentary are solely those of Bruce Schneier.

ADVERTISEMENT
Part of complete coverage on
updated 2:49 PM EDT, Tue April 15, 2014
Kathleen Blee says the KKK and white power or neo-Nazi groups give haters the purpose and urgency to use violence.
updated 7:56 AM EDT, Wed April 16, 2014
Sen. Sheldon Whitehouse and Rep. Henry Waxman say read deep, and you'll see the federal Keystone pipeline report spells out the pipeline is bad news
updated 7:53 AM EDT, Wed April 16, 2014
Frida Ghitis says President Obama needs to stop making empty threats against Russia and consider other options
updated 5:29 PM EDT, Tue April 15, 2014
Peter Bergen and David Sterman say the Kansas Jewish Center killings are part of a string of lethal violence in the U.S. that outstrips al Qaeda-influenced attacks. Why don't we pay more attention?
updated 12:41 PM EDT, Tue April 15, 2014
Danny Cevallos says families of the passengers on Malaysian Airlines Flight 370 need legal counsel
updated 11:23 AM EDT, Mon April 14, 2014
David Frum says Russia is on a rampage of mischief while Western leaders and Western alliances charged with keeping the peace hem and haw
updated 7:56 AM EDT, Mon April 14, 2014
Most adults make the mistakes of hitting the snooze button and of checking emails first thing in the morning, writes Mel Robbins
updated 1:54 PM EDT, Mon April 14, 2014
David Wheeler says as middle-class careers continue to disappear, we need a monthly cash payment to everyone
updated 7:55 AM EDT, Mon April 14, 2014
Democrats need to show more political spine when it comes to the issue of taxes.
updated 11:55 AM EDT, Mon April 14, 2014
Donna Brazile recalls the 50th Anniversary of the Civil Rights Act as four presidents honored the heroes of the movement and Lyndon Johnson, who signed the law
updated 9:17 AM EDT, Mon April 14, 2014
Elmer Smith remembers Chuck Stone, the legendary journalist from Philadelphia who was known as a thorn in the side of police and an advocate for the little guy
updated 2:56 PM EDT, Sun April 13, 2014
Al Franken says Comcast, the nation's largest cable provider, wants to acquire Time Warner Cable, the nation's second-largest cable provider. Should we be concerned?
updated 11:22 AM EDT, Fri April 11, 2014
Philip Cook and Kristin Goss says the Pennsylvania stabbing attack, which caused grave injury -- but not death, carries a lesson on guns for policymakers
updated 3:06 PM EDT, Fri April 11, 2014
Wikipedia lists 105 football movies, but all too many of them are forgettable, writes Mike Downey
updated 10:32 AM EDT, Fri April 11, 2014
John Sutter and hundreds of iReporters set out to run marathons after the bombings -- and learned a lot about the culture of running
updated 12:49 PM EDT, Fri April 11, 2014
Timothy Stanley says it was cowardly to withdraw the offer of an honorary degree to Ayaan Hirsi Ali. The university should have done its homework on her narrow views and not made the offer
updated 10:16 AM EDT, Fri April 11, 2014
Al Awlaki
Almost three years after his death in a 2011 CIA drone strike in Yemen, Anwar al-Awlaki continues to inspire violent jihadist extremists in the U.S, writes Peter Bergen
updated 9:21 PM EDT, Fri April 11, 2014
David Bianculli says Colbert is a smart, funny interviewer, but ditching his blowhard persona to take over the mainstream late-night role may cost him fans
updated 1:31 PM EDT, Thu April 10, 2014
Rep. Paul Ryan says the Republican budget places its trust in the people, not in Washington
updated 5:28 PM EDT, Thu April 10, 2014
Aaron David Miller says Obama isn't to blame for Kerry's lack of progress in resolving Mideast talks
updated 11:22 AM EDT, Mon April 14, 2014
David Weinberger says beyond focusing on the horrors of the attack a year ago, it's worth remembering the lessons it taught about strength, the dangers of idle speculation and Boston's solidarity
updated 12:32 PM EDT, Thu April 10, 2014
Katherine Newman says the motive for the school stabbing attack in Pennsylvania is not yet known, but research on such rampages turns up similarities in suspects and circumstances
updated 7:03 AM EDT, Fri April 11, 2014
Simon Tisdall: Has John Kerry's recent track record left Russia's wily leader ever more convinced of U.S. weakness?
updated 12:40 PM EDT, Thu April 10, 2014
Mel Robbins says Nate Scimio deserves credit for acting bravely in a frightening attack and shouldn't be criticized for posting a selfie afterward
updated 2:39 PM EDT, Wed April 9, 2014
Wendy Townsend says the Rattlesnake Roundup -- where thousands of pounds of snakes are killed and tormented -- is barbaric
updated 9:45 AM EDT, Thu April 10, 2014
Dr. Mary Mulcahy says doctors who tell their patients the truth risk getting bad ratings from them
updated 9:28 AM EDT, Wed April 9, 2014
Peggy Drexler says the married Rep. McAllister, caught on video making out with a staffer, won't get a pass from voters who elected him as a Christian conservative with family values
updated 7:43 AM EDT, Wed April 9, 2014
David Frum says the president has failed to react strongly to crises in Iran, Syria, Ukraine and Venezuela, encouraging others to act out
updated 4:57 PM EDT, Wed April 9, 2014
Eric Liu says Paul Ryan gets it very wrong: The U.S.'s problem is not a culture of poverty, it is a culture of wealth that is destroying the American value linking work and reward
updated 7:51 AM EDT, Wed April 9, 2014
Frida Ghitis writes: "We are still seeing the world mostly through men's eyes. We are still hearing it explained to us mostly by men."
updated 10:08 AM EDT, Thu April 10, 2014
Chester Wisniewski says the Heartbleed bug shows how we're all tangled together, relying on each other for Internet security
updated 3:26 PM EDT, Wed April 9, 2014
Danny Cevallos says an Ohio school that suspended a little kid for pointing his finger at another kid and pretending to shoot shows the growth in "zero tolerance" policies at school run amok
ADVERTISEMENT
ADVERTISEMENT
ADVERTISEMENT
ADVERTISEMENT