'Kill switch' debate takes another turn

Should anyone have power to shut down the Internet? Is it even possible?

If a foreign country launches a cyberattack on the United States, should the president be able to shut down parts of the Internet to protect the nation’s infrastructure and networks?

Sixty-one percent of people responding to a recent survey supported the idea. But a great majority of  the readers responding to William Jackson’s report on the survey disagree.

The question first arose when the phrase "kill swiitch" began to circulate in connection to the Protecting Cyberspace as a National Asset Act of 2010, S. 3480, However, while the belief is widespread in some quarters that the legislation would give the president a “kill switch” to shut down the Internet whenever he deems fit, it really doesn’t go that far.

Alan Paller, research director for the SANS Institute, writing in GCN after the bill was introduced, wrote that the bill “just authorizes standard filtering like that done by Internet service providers every day, but in a nationally coordinated fashion.”


Related stories:

The 7 people who can restart the Internet

President has had ‘kill switch’ for communications since 1934


In fact, Paller wrote, the president has had a “kill switch” since 1934, when the Telecommunications Act gave the Oval Office power to shut down or disrupt networks during a national security emergency.

But whether the power comes from the 1934 act or the current bill before the Senate, the question posed by Unisys’ Security Index survey was whether he should have that power.

“This is a terrible idea and, if passed, we are in big trouble,” wrote Gerry McGowan of Virginia. “I really disagree with having that capability created for any entity for two big reasons. First, if the capability can be created, it can (will) be compromised and used against us in an attack. The Internet is global. We (USA) do not own it and it is not segmented into nice functional areas (how would one isolate the financial segment?) Second and most importantly, if the capability is created it can and will be abused for control … there is no segment of our government (or any other) that I would trust with such power. Better that each entity has the capability itself (DOD already has the ability to isolate) and the government initiates a system that recommends actions to isolate individual entities in at-risk segments of the internet. The individual entities take on the risk of not complying.”

“I could see the President having the authority to shut down the government and the military from the Internet, but having the authority to shut down privately owned websites goes a little far since it is not always clear whether the website is U.S.-owned or foreign-owned,” wrote another reader. “This is a very slippery slope that must be avoided. If there is a rogue site then it behooves ISPs to manage their infrastructure and block these sites.”

“Are people insane?” asked a reader in Florida. “The level of sophistication necessary to achieve an immediate shutdown of the Internet could not be placed at the disposal of one individual without compromising the security and privacy of the rest of us. Just one more move toward depriving us of our individual freedoms. I wonder what the result of the survey would have been if it were conducted during the Bush presidency.”

“The answer is simple,” summed up db in Omaha, Neb.: “No such authority should ever be given to any one person or even an organization.”

Chip of Hollywood, Fla., pointed out the potential dangers of concentrating control in one place. “If  the ‘switch’ exists it becomes a critical fail point when compromised. Unless it is physically some giant switch that can be tripped like something you would see in Frankenstein’s lab, and therefore physically protected by someone, presumably with a gun, this is a bad idea.”

DionS of D.C. suggested that a kill-switch level of control would be hard to achieve. “It's nice to say that isolation of certain infrastructures would protect them, but after working in most of the critical industries I would say that the ability to isolate them from attack and keep them able to interoperate as necessary is technically infeasible today,” he wrote. “Companies tightly integrate their critical presence from the corporate public presence. The effort needed to isolate the critical part would require the isolation of the public part as well. … I support the requirements for companies to have defined contingencies that meet some federal standard and the president being able to order the invocation of contingency plans. I suspect this is what is meant by ‘kill switch’ after all, the president doesn't push a button and launch the missiles, he orders others to do it.”

“I don't understand why everyone is getting so excited about this,” wrote Jeffrey A. Williams. “The president has always had a ‘kill switch’ for public as well as government networks. Frankly, shutting down public networks totally would be a very difficult task to accomplish since about the early 1990s, as so many are interlinked so intricately and complexly as well as being not totally originated/located on the continent that to accomplish such a task would take some significant time to do cleanly.”

A few people did defend the idea, although with some qualifications.

“Perhaps we need an amendment to the Constitution [for] ‘the right to Internet access," Richard Ordowich of Princeton, N.J. “I think if we added up all the potential vulnerabilities to the Internet we would discover that a significant breach of data is inevitable. Our ability to respond to a breach may require time to develop and a solution such as the ‘kill switch,’ maybe the only recourse. I only hope that those ‘in the know’ consider this eventuality and are losing some sleep over it. It certainly worries me.”

Bill Smith of Norfolk, Va., questioned the accuracy of the survey sample, but acknowledged the importance of protecting systems. “A 1,000 person survey can not be considered representative of a population that is 310 million persons strong. This is basic statistics 101,” he wrote. “However, as an IT professional, I agree believe that the Department of Homeland Security should work with DOD to monitor and be able to defend national infrastructure and financial systems.”

At least one reader was straight-up in favor, writing: “I think that is an excellent idea. How do we vote for this!”

And another reader had an alternate, if tongue-in-cheek, solution: “I've got something more effective than a kill switch. I've got this cute video of dancing kittens that is sure to bring down the Internet when everyone starts downloading it. And I am prepared to use it if the call from the president comes.”

About the Author

Kevin McCaney is a former editor of Defense Systems and GCN.

inside gcn

  • digital model of city (Shutterstock.com)

    Why you need a digital twin

Reader Comments

Fri, Nov 19, 2010 Patrick McCarty Florida

My concern is why do we now refer to our agency leaders as Czar? Recently the replacement Director of Homeland Security was reported in media as Czar. This is a title to those Russian leaders. Why is this?

Fri, Nov 19, 2010 Glenn Schlarman Annandale, VA

By the time I retired from OMB in 2006, I had worked with most everybody who would be recommending to POTUS the use of the kill switch (and I know many of those advocating such use today). To them I say, you people frighten me even more than before and the idea is asine. Fact is before hitting the switch, POTUS will never hear from those against its use -- 'cause it'll be recommended in a spooky secret memo the rest of us will never know about. Just remember the law of unintended consequences.

Thu, Nov 18, 2010

Seems to me that it sound a lot like the USSR or Red China. Open your eyes little lambs. The 1934 act was not written to protect the U.S. from doing business with each other. Only from threats from other hostile countries. Which currently we have to do every day, without big brothers Kill Switch. Cyber terrorism is happing everyday, and we keep moving forward. It's the American way. If the Government doesn't get the ability to totally control us, We will continually move forward.

Thu, Nov 18, 2010 TV Watcher

There was a TV show on years ago about federal officers who were cyber security cops. They had all the power of the FBI but basically protected the Internet. At the end of the show some terrorists took over the White House because they wanted to get to the Internet Kill switch, which was kept in the president's desk apparently. The cyber cops busted in at the last moment and killed the terrorists just as they were trying to flip the last set of switches to turn the Internet dark. Either that or the president went crazy and wanted to kill the net, I can't quite remember. Anyway, it was stupid then and even more so now to think that a single switch could protect the Internet by turning it off. Any cyber attack is going to be so fast, the damage will be long done before anyone can reach into their desk and throw some magical kill switch.

Thu, Nov 18, 2010

as pogo would say more than 30 years ago: "we have met the enemy, and he is us". the mere fact that some "expert" jaboney thought of this idea -- doesn't make it worth exploring, better leave this nonsense to some private company who would like to spend their OWN financial resources writing nonsense about it. but please don't throw any tax dollars down the toilet... and let some government contractor investigate and research this nonsense. just unplug yourself from the internet if you have this kind of fear.

Show All Comments

Please post your comments here. Comments are moderated, so they may not appear immediately after submitting. We will not post comments that we consider abusive or off-topic.

Please type the letters/numbers you see above

More from 1105 Public Sector Media Group