<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	>

<channel>
	<title>The OPSEC Professional's Association President's Blog</title>
	<atom:link href="http://www.opsecprofessionals.org/blog/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.opsecprofessionals.org/blog</link>
	<description>Straight talk from the OSPA President</description>
	<pubDate>Wed, 21 Jul 2010 15:35:14 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.7.1</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>OPSEC in the strangest places</title>
		<link>http://www.opsecprofessionals.org/blog/opsec-in-the-strangest-places/</link>
		<comments>http://www.opsecprofessionals.org/blog/opsec-in-the-strangest-places/#comments</comments>
		<pubDate>Wed, 21 Jul 2010 15:35:14 +0000</pubDate>
		<dc:creator>chris.cox</dc:creator>
		
		<category><![CDATA[history]]></category>

		<category><![CDATA[OPSEC military]]></category>

		<category><![CDATA[OPSEC war]]></category>

		<guid isPermaLink="false">http://www.opsecprofessionals.org/blog/?p=80</guid>
		<description><![CDATA[OPSEC aptly summarized in this saterday night live sketch


No related posts.

Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.]]></description>
			<content:encoded><![CDATA[<p>It&#8217;s amazing where you can find valuable OPSEC messages. This 1990 Saturday Night Live sketch captures a timeless OPSEC message that&#8217;s as relevant today as it was then.</p>
<p>[ open on press conference discussing the Gulf War ]</p>
<p>Defense Secretary Richard Cheney: And so, to sum up, while this war is by no means over, it is certainly fair to say that we have inflicted heavy damage on the Iraqi war machine, and every day brings victory for the coalition that much colser. Now I&#8217;m going to hand the floor over to the Lieutenant Colonel Pierson, who will field your questions. </p>
<p>Lt. Col. William Pierson: Thank you Senator Cheney. I&#8217;m happy to take any questions you might have with the understanding that there are certain sensitive areas that I&#8217;m just not going to get into. Particularly, information that might be useful to the enemy. Yes? </p>
<p>Reporter #1: What date are we going to start the ground attack? </p>
<p>Lt. Col. William Pierson: Well, as I mentioned a moment ago, there are certain sensitive areas which we are just not going to go into, and that is certainly one of them. Yes? </p>
<p>Reporter #2: Sir, knowing what you know, where would you say our forces are most vulnerable to attack, and how could the Iraqis best exploit those weaknesses?</p>
<p>Lt. Col. William Pierson: Well, again, this falls into the area of information that might be useful to the enemy, and I just can&#8217;t divulge it right now. </p>
<p>Reporter #3: Sir! Which method of hiding SCUD missiles is working best for the Iraqis? </p>
<p>Lt. Col. William Pierson: Now, this again is a good example of information that could help the enemy, and I just can&#8217;t answer that. </p>
<p>Reporter #4: I have a two-part question. Are we planning an amphibious invasion of Kuwait, and if so, where exactly will that be? </p>
<p>Defense Secretary Richard Cheney: Excuse me. If I could interrupt here, I just want to underscore what Colonely Pierson said at the start of Q&#038;A. There are two general categories of questions that we are simply not going to be able to address. On, those that would give our enemy advance warning of our actions, and two, those that would identify any points of weakness or vulnerabilities to the Iraqi forces. So let&#8217;s reopen the floor to questions. </p>
<p>Reporter #5: I understand that there are passwords that our troops use on the front lines. Could you give us some examples of those? </p>
<p>Lt. Col. William Pierson: No, that is something I really cannot comment on. </p>
<p>Reporter #6: Yeah! Are we planning an amphibious invasion of Kuwait? And if so, where? </p>
<p>Lt. Col. William Pierson: I believe that question was asked and if you recall, I already answered it, or said I could not answer. </p>
<p>Reporter #7: Sir, what woul dbe the one piece of information that would be most dangerous for the Iraqis to know? </p>
<p>Lt. Col. William Pierson: No can answer! I have time for two more questions. Yeah? </p>
<p>Reporter #8: Yes, Farud Hashami, Baghdad Times. Where are your troops, and can I go there and count them? </p>
<p>Lt. Col. William Pierson: Nope! Last question.</p>
<p>Reporter #9: Is there anything that you can tell us that would lower the morale of our fighting men? </p>
<p>Lt. Col. William Pierson: No. Really, the only thing we&#8217;re at liberty to say at this time is, &#8220;Live, from New York, it&#8217;s Saturday Night! </p>
<br/><a href="http://www.socialmarker.com/?link=http://www.opsecprofessionals.org/blog/opsec-in-the-strangest-places/&title=OPSEC+in+the+strangest+places&text=It%26%238217%3Bs+amazing+where+you+can+find+valuable+OPSEC+messages.+This+1990+Saturday+Night+Live+sketch+captures+a+timeless+OPSEC+message+that%26%238217%3Bs+as+relevant+today+as+it+was+then.&tags=col+william%2C+information+that%2C+the+enemy%2C+pierson%2C+reporter%2C+william%2C+there%2C+could%2C+would%2C+going" target="_blank"><img src= "http://www.socialmarker.com/bookmark.gif" border="0" /></a><noscript><a href="http://www.socialmarker.com" >Social Bookmarking</a></noscript><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save?&amp;linkurl=http%3A%2F%2Fwww.opsecprofessionals.org%2Fblog%2Fopsec-in-the-strangest-places%2F&amp;linkname=OPSEC%20in%20the%20strangest%20places"><img src="http://www.opsecprofessionals.org/blog/wp-content/plugins/add-to-any/share_save_120_16.png" width="120" height="16" alt="Share/Save/Bookmark"/></a>

<p>No related posts.</p>
<p>Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.</p>]]></content:encoded>
			<wfw:commentRss>http://www.opsecprofessionals.org/blog/opsec-in-the-strangest-places/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Spies among us</title>
		<link>http://www.opsecprofessionals.org/blog/spies-among-us/</link>
		<comments>http://www.opsecprofessionals.org/blog/spies-among-us/#comments</comments>
		<pubDate>Fri, 02 Jul 2010 07:10:49 +0000</pubDate>
		<dc:creator>chris.cox</dc:creator>
		
		<category><![CDATA[Espionage]]></category>

		<category><![CDATA[OPSEC awareness]]></category>

		<category><![CDATA[Social Media]]></category>

		<category><![CDATA[case study]]></category>

		<category><![CDATA[Spies]]></category>

		<guid isPermaLink="false">http://www.opsecprofessionals.org/blog/?p=78</guid>
		<description><![CDATA[According to the Federal Bureau of Investigation, eleven men and women, including four married couples, three with children, were arrested for crimes connected to, but (surprisingly) not including, espionage. These men and women worked for more than a decade to blend in to American society. Far from the gripping ‘James Bond’ image, they lived mundane lives in normal neighborhoods. In no case did their neighbors suspect that they were anything but what they said they were, but in fact their orders were clear: “You were sent to the USA for a long-term service trip. Your education, bank accounts, car, house etc. – all these serve one goal: fulfill your main mission, i.e, to search and develop ties in policymaking circles in US and send intels [intelligence reports] to C [Center]”, according to the FBI affidavit describing intercepted messages.



No related posts.

Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.]]></description>
			<content:encoded><![CDATA[<p>They were neighbors, they were co-workers. They tended to the garden on weekends and walked their children to the bus stop on school days. They facebooked and youtubed, paid taxes, bought lovely homes and, allegedly, spied on the United States of America on behalf of Russia.</p>
<p>According to the Federal Bureau of Investigation, eleven men and women, including four married couples, three with children, were arrested for crimes connected to, but (surprisingly) not including, espionage. These men and women worked for more than a decade to blend in to American society. Far from the gripping ‘James Bond’ image, they lived mundane lives in normal neighborhoods. In no case did their neighbors suspect that they were anything but what they said they were, but in fact their orders were clear: “You were sent to the USA for a long-term service trip. Your education, bank accounts, car, house etc. – all these serve one goal: fulfill your main mission, i.e, to search and develop ties in policymaking circles in US and send intels [intelligence reports] to C [Center]”, according to the FBI affidavit describing intercepted messages.</p>
<p>The eleven alleged agents are being charged with money laundering and “acting as unregistered foreign agents”. At this time, they are not being charged with espionage, as they were never actually caught transmitting Classified information to Russia. Reportedly, most of the information that they had transmitted was open source intelligence available to anyone that can use Google. That, in itself, is but one example of how the face of espionage has changed over the last several decades. In addition to traditional espionage techniques (referred to colloquially as tradecraft), such as dead drops, invisible ink, coded transmissions and swapping bags at train stations, this case is interesting in that it integrates more contemporary methods as well. This group hid messages in computer images (a scheme called steganography) and used laptops with wireless cards to connect to private and unsecured wireless access points (such as those in residential areas or coffee shops) to send messages that would be tracked back to the location that they were when they sent the message, rather than their own homes. </p>
<p>As it was, it was determined that the alleged agents were not effective at their given task. However, Claire Lopez, Senior fellow at the center for Security Policy and former operations officer for the CIA, cautions that it may have only been a matter of time before they refined their technique, or simply got lucky, and that they may have been able to produce intelligence of value, if left in place long enough. “Their value is not just in acquiring classified information”, says Lopez, “There’s a lot that goes on that’s not simply stealing secrets and sending them back to Moscow.” This is a fact of which the OPSEC community has long since been aware. </p>
<p>The OPSEC community has also long since known that social networking is, in fact, a tool used by the adversary. This case brought that fact into stark focus, when it was revealed that one of the men, based in Seattle, was a frequent user of the professional social networking site LinkedIn. Another, Anna Chapman, became a sort of media sensation after the story broke, when she was found to have created several social networking accounts, posting everything from mundane statuses to risqué pictures of herself. </p>
<p>It’s possible (although we may never know for sure), that these alleged agents were “amateurs”, as some claim, and were not acting in an official capacity for the Russian Government. It’s possible, as has also been theorized, that they grew to love life in the United States, and purposely extended their mission in order to form genuine community roots. Their motivations are now a matter for the legal system. What should be noted by all security personnel is that each of these individuals lived in this country for over a decade without arousing the suspicions of their neighbors, friends and coworkers. There is an actual, real-life threat (as exemplified by this, the largest alleged spy ring ever broken by the FBI), and proper safeguards must be maintained in order to mitigate it. </p>
<p>One can only assume that as technologies increase, and prices for them decrease, the threats will only become more sophisticated and much more difficult to detect. These particular individuals were detected by the FBI- not by neighbors, not by coworkers- before they had done any demonstrable harm. The question that one is left to ask themselves is, “If they were in my workplace today, would I know what to look for?” </p>
<br/><a href="http://www.socialmarker.com/?link=http://www.opsecprofessionals.org/blog/spies-among-us/&title=Spies+among+us&text=They+were+neighbors%2C+they+were+co-workers.+They+tended+to+the+garden+on+weekends+and+walked+their+children+to+the+bus+stop+on+school+days.&tags=that+they%2C+they+were%2C+their%2C+these" target="_blank"><img src= "http://www.socialmarker.com/bookmark.gif" border="0" /></a><noscript><a href="http://www.socialmarker.com" >Social Bookmarking</a></noscript><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save?&amp;linkurl=http%3A%2F%2Fwww.opsecprofessionals.org%2Fblog%2Fspies-among-us%2F&amp;linkname=Spies%20among%20us"><img src="http://www.opsecprofessionals.org/blog/wp-content/plugins/add-to-any/share_save_120_16.png" width="120" height="16" alt="Share/Save/Bookmark"/></a>

<p>No related posts.</p>
<p>Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.</p>]]></content:encoded>
			<wfw:commentRss>http://www.opsecprofessionals.org/blog/spies-among-us/feed/</wfw:commentRss>
		</item>
		<item>
		<title>National OPSEC Conference rescheduled, and JPR Master&#8217;s Series</title>
		<link>http://www.opsecprofessionals.org/blog/national-opsec-conference-rescheduled-and-jpr-masters-series/</link>
		<comments>http://www.opsecprofessionals.org/blog/national-opsec-conference-rescheduled-and-jpr-masters-series/#comments</comments>
		<pubDate>Thu, 10 Jun 2010 03:26:41 +0000</pubDate>
		<dc:creator>chris.cox</dc:creator>
		
		<category><![CDATA[Other]]></category>

		<category><![CDATA[IOSS]]></category>

		<category><![CDATA[national opsec conference]]></category>

		<category><![CDATA[Terrorism]]></category>

		<guid isPermaLink="false">http://www.opsecprofessionals.org/blog/?p=73</guid>
		<description><![CDATA[IOSS has rescheduled the National OPSEC Conference. Also, JPR and Associates has released their Master's Series.


No related posts.

Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.]]></description>
			<content:encoded><![CDATA[<p>By now, you may have heard the great news, that the 2010 National OPSEC Conference has been rescheduled! From IOSS: &#8220;Mark your calendars for 7-10 September 2010 at the Gaylord National Hotel and Resort in Washington, DC. We will replicate the original conference to the best of our ability. Needless to say, this is a huge undertaking and we hope you will be patient with us as we try to assemble the agenda for you.&#8221;</p>
<p>They will be opening on-line registration as soon as possible, and we&#8217;ll be sure to keep you in the loop, so you can make sure to register. The site will be the same, www.iad.gov/events.</p>
<p>While tentative, the planned schedule is:</p>
<p>      Tuesday, 7 September </p>
<p>            1200-1700 Check-in Registration</p>
<p>            1300-1630 OPSEC Fundamentals Workshop (Pre-registration required)</p>
<p>            TBD  OSCAR Working Group</p>
<p>            TBD  Training Committee Meeting</p>
<p>            TBD  DoD Program Meeting</p>
<p>            TBD  COCOM Program Meeting</p>
<p>            TBD  National OPSEC Awards Rehearsal </p>
<p>      Wednesday, 8 September </p>
<p>            0700-1700 Check-in Registration </p>
<p>            0800-0930 Opening Ceremony, Administrative Remarks and General Session</p>
<p>            0945-1115 Break-out sessions</p>
<p>            1130-1245 National OPSEC Awards Ceremony and Luncheon</p>
<p>            1300-1400 Break-out sessions</p>
<p>            1415-1515 Break-out sessions</p>
<p>            1530-1700 Specialized Program Meetings (DHS, USN/USMC, DLA, USCG, etc.) </p>
<p>      Thursday, 9 September </p>
<p>            0700-1700 Check-in Registration</p>
<p>            0800-0900 General Session</p>
<p>            0915-1015 Break-out sessions</p>
<p>            1030-1130 Break-out sessions</p>
<p>            1130-1230 Lunch ON YOUR OWN</p>
<p>            1230-1400 Break-out sessions</p>
<p>            1415-1515 Break-out sessions</p>
<p>            1530-1630 Break-out sessions</p>
<p>            1630-?  OPS Social </p>
<p>      Friday, 10 September </p>
<p>            0800-0900 Break-out sessions</p>
<p>            0915-1015 Break-out sessions</p>
<p>            1030-1230 Break-out sessions</p>
<p>      One a similar note, if you haven&#8217;t logged into the member&#8217;s section in a while, you may notice some exciting changes. Among the most recent and exciting is the addition of the JPR and Associates  &#8220;Master&#8217;s Series&#8221;.</p>
<p>      Licensed for use for all OSPA members, at no cost to the members themselves, the master series brings subject matter expertise in areas related to national security, anti-terrorism, new technologies, and more, and is also used by other agencies, to include the Naval War College, Wells Fargo, FEMA, TSA, NSTI, NORCOM, Air Force Space Command and more.</p>
<p>      I hope you&#8217;ll find this resource as valuable as we, and the above entities, have!</p>
<br/><a href="http://www.socialmarker.com/?link=http://www.opsecprofessionals.org/blog/national-opsec-conference-rescheduled-and-jpr-masters-series/&title=National+OPSEC+Conference+rescheduled%2C+and+JPR+Master%26%238217%3Bs+Series&text=By+now%2C+you+may+have+heard+the+great+news%2C+that+the+2010+National+OPSEC+Conference+has+been+rescheduled%21&tags=break-out+sessions%2C+check-in+registration%2C+sessions%2C+break-out%2C+september%2C+national" target="_blank"><img src= "http://www.socialmarker.com/bookmark.gif" border="0" /></a><noscript><a href="http://www.socialmarker.com" >Social Bookmarking</a></noscript><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save?&amp;linkurl=http%3A%2F%2Fwww.opsecprofessionals.org%2Fblog%2Fnational-opsec-conference-rescheduled-and-jpr-masters-series%2F&amp;linkname=National%20OPSEC%20Conference%20rescheduled%2C%20and%20JPR%20Master%26%238217%3Bs%20Series"><img src="http://www.opsecprofessionals.org/blog/wp-content/plugins/add-to-any/share_save_120_16.png" width="120" height="16" alt="Share/Save/Bookmark"/></a>

<p>No related posts.</p>
<p>Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.</p>]]></content:encoded>
			<wfw:commentRss>http://www.opsecprofessionals.org/blog/national-opsec-conference-rescheduled-and-jpr-masters-series/feed/</wfw:commentRss>
		</item>
		<item>
		<title>National OPSEC Conference, Monday</title>
		<link>http://www.opsecprofessionals.org/blog/national-opsec-conference-monday/</link>
		<comments>http://www.opsecprofessionals.org/blog/national-opsec-conference-monday/#comments</comments>
		<pubDate>Mon, 03 May 2010 23:32:43 +0000</pubDate>
		<dc:creator>chris.cox</dc:creator>
		
		<category><![CDATA[OSPA]]></category>

		<category><![CDATA[noc]]></category>

		<guid isPermaLink="false">http://www.opsecprofessionals.org/blog/national-opsec-conference-monday/</guid>
		<description><![CDATA[Sadly, the 2010 National OPSEC Conference has been canceled due to flooding.
Literally, parts of the hotel is underwater, and multiple deaths are reported. 
OSPA would like to thank both the IOSS and fellow attendees- IOSS who provided leadership and direction, and all of the NOC attendees who were present. It was warming to see the [...]


No related posts.

Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.]]></description>
			<content:encoded><![CDATA[<p>Sadly, the 2010 National OPSEC Conference has been canceled due to flooding.</p>
<p>Literally, parts of the hotel is underwater, and multiple deaths are reported. </p>
<p>OSPA would like to thank both the IOSS and fellow attendees- IOSS who provided leadership and direction, and all of the NOC attendees who were present. It was warming to see the way the OPSEC community stood together, sharing food, space and resources during the evacuation and high school stay. OPSEC&#8217;ers are a funny bunch, but they will always watch out for eachother, when needed.</p>
<p>Our thoughts and prayers go out to those affected by this disaster, and appreciate the kindness and hospitality shown by local authorities.</p>
<br/><a href="http://www.socialmarker.com/?link=http://www.opsecprofessionals.org/blog/national-opsec-conference-monday/&title=National+OPSEC+Conference%2C+Monday&text=Sadly%2C+the+2010+National+OPSEC+Conference+has+been+canceled+due+to+flooding.+Literally%2C+parts+of+the+hotel+is+underwater%2C+and+multiple+deaths+are+reported.&tags=" target="_blank"><img src= "http://www.socialmarker.com/bookmark.gif" border="0" /></a><noscript><a href="http://www.socialmarker.com" >Social Bookmarking</a></noscript><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save?&amp;linkurl=http%3A%2F%2Fwww.opsecprofessionals.org%2Fblog%2Fnational-opsec-conference-monday%2F&amp;linkname=National%20OPSEC%20Conference%2C%20Monday"><img src="http://www.opsecprofessionals.org/blog/wp-content/plugins/add-to-any/share_save_120_16.png" width="120" height="16" alt="Share/Save/Bookmark"/></a>

<p>No related posts.</p>
<p>Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.</p>]]></content:encoded>
			<wfw:commentRss>http://www.opsecprofessionals.org/blog/national-opsec-conference-monday/feed/</wfw:commentRss>
		</item>
		<item>
		<title>National OPSEC Conference, Sunday</title>
		<link>http://www.opsecprofessionals.org/blog/national-opsec-conference-sunday/</link>
		<comments>http://www.opsecprofessionals.org/blog/national-opsec-conference-sunday/#comments</comments>
		<pubDate>Mon, 03 May 2010 04:26:30 +0000</pubDate>
		<dc:creator>chris.cox</dc:creator>
		
		<category><![CDATA[OSPA]]></category>

		<category><![CDATA[national opsec conference]]></category>

		<category><![CDATA[noc]]></category>

		<guid isPermaLink="false">http://www.opsecprofessionals.org/blog/national-opsec-conference-sunday/</guid>
		<description><![CDATA[Sunday was a little bit of a wash at the National&#8230; Literally. 
I&#8217;m writing this blog entry on my iPhone from the gym of McGavock High School because the hotel and conference center has been evacuated due to heavy rain and flooding. 
But, the show will go on, and we all plan on returning to [...]


No related posts.

Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.]]></description>
			<content:encoded><![CDATA[<p>Sunday was a little bit of a wash at the National&#8230; Literally. </p>
<p>I&#8217;m writing this blog entry on my iPhone from the gym of McGavock High School because the hotel and conference center has been evacuated due to heavy rain and flooding. </p>
<p>But, the show will go on, and we all plan on returning to the hotel as soon as we&#8217;re cleared to do so. In the mean time, I&#8217;m about to scarf down a peanut butter sandwich and drinking fountain water. Bon appatit!</p>
<p><a href="http://www.opsecprofessionals.org/blog/wp-content/uploads/2010/05/l-2048-1536-428f586f-90c7-4a96-bccc-8db46fa853fe.jpeg"><img src="http://www.opsecprofessionals.org/blog/wp-content/uploads/2010/05/l-2048-1536-428f586f-90c7-4a96-bccc-8db46fa853fe.jpeg" alt="" class="alignnone size-full" /></a></p>
<p><a href="http://www.opsecprofessionals.org/blog/wp-content/uploads/2010/05/p-2048-1536-8311a8a4-d35e-4f16-9965-2a6f0798b2cb.jpeg"><img src="http://www.opsecprofessionals.org/blog/wp-content/uploads/2010/05/p-2048-1536-8311a8a4-d35e-4f16-9965-2a6f0798b2cb.jpeg" alt="" class="alignnone size-full" /></a></p>
<br/><a href="http://www.socialmarker.com/?link=http://www.opsecprofessionals.org/blog/national-opsec-conference-sunday/&title=National+OPSEC+Conference%2C+Sunday&text=Sunday+was+a+little+bit+of+a+wash+at+the+National%26%238230%3B+Literally.++I%26%238217%3Bm+writing+this+blog+entry+on+my+iPhone+from+the+gym+of+McGavock+High+School+because+the+hotel+and+conference+center+has...&tags=" target="_blank"><img src= "http://www.socialmarker.com/bookmark.gif" border="0" /></a><noscript><a href="http://www.socialmarker.com" >Social Bookmarking</a></noscript><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save?&amp;linkurl=http%3A%2F%2Fwww.opsecprofessionals.org%2Fblog%2Fnational-opsec-conference-sunday%2F&amp;linkname=National%20OPSEC%20Conference%2C%20Sunday"><img src="http://www.opsecprofessionals.org/blog/wp-content/plugins/add-to-any/share_save_120_16.png" width="120" height="16" alt="Share/Save/Bookmark"/></a>

<p>No related posts.</p>
<p>Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.</p>]]></content:encoded>
			<wfw:commentRss>http://www.opsecprofessionals.org/blog/national-opsec-conference-sunday/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Hiding in plain sight</title>
		<link>http://www.opsecprofessionals.org/blog/hiding-in-plain-site/</link>
		<comments>http://www.opsecprofessionals.org/blog/hiding-in-plain-site/#comments</comments>
		<pubDate>Tue, 29 Dec 2009 17:41:36 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Uncategorized]]></category>

		<category><![CDATA[hiding in plain sight]]></category>

		<category><![CDATA[OPSEC]]></category>

		<guid isPermaLink="false">http://www.opsecprofessionals.org/blog/hiding-in-plain-site/</guid>
		<description><![CDATA[The joke goes something like this:
There was a man who had worked at a factory for twenty years.  Every night when he left the plant, he would push a wheelbarrow full of straw to the guard at the gate.
The guard would look through the straw, and find nothing and pass the man through.
On the [...]


No related posts.

Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.]]></description>
			<content:encoded><![CDATA[<p>The joke goes something like this:</p>
<p>There was a man who had worked at a factory for twenty years.  Every night when he left the plant, he would push a wheelbarrow full of straw to the guard at the gate.<br />
The guard would look through the straw, and find nothing and pass the man through.<br />
On the day of his retirement the man came to the guard as usual but without the wheelbarrow.<br />
Having become friends over the years, the guard asked him, &#8220;Charlie, I&#8217;ve seen you walk out of here every night for twenty years. I know you&#8217;ve been stealing something. Now that you&#8217;re retired, tell me what it is.  It&#8217;s driving me crazy.&#8221;<br />
Charlie simply smiled and replied, &#8220;Okay, wheelbarrows!&#8221;</p>
<p>While wheelbarrow theft may not (or may, who are we to judge?) be your biggest concern, the message certainly is. Sometimes, the biggest threats are hiding in plain sight. Sometimes, what we assume is our biggest concern&#8230; is actually a distraction.</p>
<br/><a href="http://www.socialmarker.com/?link=http://www.opsecprofessionals.org/blog/hiding-in-plain-site/&title=Hiding+in+plain+sight&text=The+joke+goes+something+like+this%3A+There+was+a+man+who+had+worked+at+a+factory+for+twenty+years.++Every+night+when+he+left+the+plant%2C+he+would+push+a+wheelbarrow+full+of+straw+to+the+guard+at+the...&tags=the+guard" target="_blank"><img src= "http://www.socialmarker.com/bookmark.gif" border="0" /></a><noscript><a href="http://www.socialmarker.com" >Social Bookmarking</a></noscript><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save?&amp;linkurl=http%3A%2F%2Fwww.opsecprofessionals.org%2Fblog%2Fhiding-in-plain-site%2F&amp;linkname=Hiding%20in%20plain%20sight"><img src="http://www.opsecprofessionals.org/blog/wp-content/plugins/add-to-any/share_save_120_16.png" width="120" height="16" alt="Share/Save/Bookmark"/></a>

<p>No related posts.</p>
<p>Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.</p>]]></content:encoded>
			<wfw:commentRss>http://www.opsecprofessionals.org/blog/hiding-in-plain-site/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Shibboleth</title>
		<link>http://www.opsecprofessionals.org/blog/shibboleth/</link>
		<comments>http://www.opsecprofessionals.org/blog/shibboleth/#comments</comments>
		<pubDate>Sun, 06 Dec 2009 06:12:09 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[case study]]></category>

		<category><![CDATA[history]]></category>

		<guid isPermaLink="false">http://www.opsecprofessionals.org/blog/?p=63</guid>
		<description><![CDATA[A historical OPSEC note


No related posts.

Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.]]></description>
			<content:encoded><![CDATA[<div>Shibboleth.</div>
<div></div>
<div>No, that&#8217;s not a misspelled curse word. It&#8217;s an actual, factual security related concept, and one of particular interest to <span class="il">OPSEC</span>&#8216;ers.</div>
<div></div>
<div>By definition, a Shibboleth is &#8220;is any distinguishing practice which is indicative of one&#8217;s social or regional origin. It usually refers to features of language, and particularly to a word whose pronunciation identifies its speaker as being a member or not a member of a particular group.&#8221;</div>
<div></div>
<div>Certain subtle clues, inferring membership or exclusion from a group, can be of particular importance to a security professional. For instance, during the Battle of the Bulge, American soldiers used baseball trivia and knowledge to determine if others were fellow Americans or if they were infiltrators in American uniform. Another example, based on accents and linguistic capabilities, is when the Dutch used the name of the town Scheveningen to identify Germans.</div>
<div></div>
<div>Of course, we see the same thing when we go home to our children. When they tell their friends that their parents are &#8220;phat phree&#8221;, we might not no whether to thank them or ground them. (pro tip: &#8220;phat phree&#8221; is not a compliment)</div>
<div></div>
<div>However, this only highlights the fact that, sometimes, things just might not &#8220;feel right&#8221;, and you, as well as every employee, should be looking out for that. Every company, office or group has certain in-jokes or unique features, and a lack of knowledge about some elements of common knowledge should certainly be considered suspicious, or at least warrant additional consideration. Of course, this cuts both ways- if someone is able to learn certain &#8220;inside phrases&#8221; or procedures, that shouldn&#8217;t necessitate trust. Gaining trust in this manner is one of the concepts behind social engineering.</div>
<div></div>
<div>Shibboleth. It&#8217;s just another potential clue- another clue for every &#8220;sensor&#8221; (meaning every employee) to determine when something just &#8220;isn&#8217;t right&#8221;.</div>
<br/><a href="http://www.socialmarker.com/?link=http://www.opsecprofessionals.org/blog/shibboleth/&title=Shibboleth&text=Shibboleth.++No%2C+that%26%238217%3Bs+not+a+misspelled+curse+word.+It%26%238217%3Bs+an+actual%2C+factual+security+related+concept%2C+and+one+of+particular+interest+to+OPSEC%26%238216%3Bers.&tags=" target="_blank"><img src= "http://www.socialmarker.com/bookmark.gif" border="0" /></a><noscript><a href="http://www.socialmarker.com" >Social Bookmarking</a></noscript><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save?&amp;linkurl=http%3A%2F%2Fwww.opsecprofessionals.org%2Fblog%2Fshibboleth%2F&amp;linkname=Shibboleth"><img src="http://www.opsecprofessionals.org/blog/wp-content/plugins/add-to-any/share_save_120_16.png" width="120" height="16" alt="Share/Save/Bookmark"/></a>

<p>No related posts.</p>
<p>Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.</p>]]></content:encoded>
			<wfw:commentRss>http://www.opsecprofessionals.org/blog/shibboleth/feed/</wfw:commentRss>
		</item>
		<item>
		<title>OPSEC while &#8220;Home Alone&#8221;</title>
		<link>http://www.opsecprofessionals.org/blog/opsec-while-home-alone/</link>
		<comments>http://www.opsecprofessionals.org/blog/opsec-while-home-alone/#comments</comments>
		<pubDate>Sun, 14 Jun 2009 19:43:47 +0000</pubDate>
		<dc:creator>chris.cox</dc:creator>
		
		<category><![CDATA[indicators]]></category>

		<category><![CDATA[opsec at home]]></category>

		<guid isPermaLink="false">http://www.opsecprofessionals.org/blog/?p=54</guid>
		<description><![CDATA[The first part of this clip from the movie &#8220;Home Alone&#8221; has a few good &#8220;OPSEC&#8217; points.
For starters, Kevin obviously took a quick look at his operation (meaning his situation at home) from the perspective of an adversary- in this case, a burglar. Realizing that the deviation from an established profile (meaning signs of an [...]


No related posts.

Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.]]></description>
			<content:encoded><![CDATA[<p>The first part of this clip from the movie &#8220;Home Alone&#8221; has a few good &#8220;OPSEC&#8217; points.</p>
<p>For starters, Kevin obviously took a quick <strong>look at his operation</strong> (meaning his situation at home) from the <strong>perspective of an adversary</strong>- in this case, a burglar. Realizing that the <strong>deviation from an established profile</strong> (meaning signs of an occupied home) is itself an <strong>indicator </strong>(that something has changed, in this case, that the home is now unoccupied), Kevin <strong>implemented a countermeasure</strong>, which was to simulate a party.</p>
<p>For all appearances, the home was occupied.</p>
<p>Later, in a convenient plot device, Kevin overhears the burglars talking about their plans in very specific detail. Talking about their plan. Within earshot of those involved. Right before zero-hour.</p>
<p>Don&#8217;t you wish is was only the bad guys that do that?</p>
<p><a href="http://www.youtube.com/watch?v=lvqpfRKW7Y4">YouTube - Home Alone Xmas</a>.</p>
<p><object width="425" height="350" data="http://www.youtube.com/v/lvqpfRKW7Y4" type="application/x-shockwave-flash"><param name="wmode" value="transparent" /><param name="src" value="http://www.youtube.com/v/lvqpfRKW7Y4" /></object></p>
<br/><a href="http://www.socialmarker.com/?link=http://www.opsecprofessionals.org/blog/opsec-while-home-alone/&title=OPSEC+while+%26%238220%3BHome+Alone%26%238221%3B&text=The+first+part+of+this+clip+from+the+movie+%26%238220%3BHome+Alone%26%238221%3B+has+a+few+good+%26%238220%3BOPSEC%26%238217%3B+points.&tags=" target="_blank"><img src= "http://www.socialmarker.com/bookmark.gif" border="0" /></a><noscript><a href="http://www.socialmarker.com" >Social Bookmarking</a></noscript><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save?&amp;linkurl=http%3A%2F%2Fwww.opsecprofessionals.org%2Fblog%2Fopsec-while-home-alone%2F&amp;linkname=OPSEC%20while%20%26%238220%3BHome%20Alone%26%238221%3B"><img src="http://www.opsecprofessionals.org/blog/wp-content/plugins/add-to-any/share_save_120_16.png" width="120" height="16" alt="Share/Save/Bookmark"/></a>

<p>No related posts.</p>
<p>Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.</p>]]></content:encoded>
			<wfw:commentRss>http://www.opsecprofessionals.org/blog/opsec-while-home-alone/feed/</wfw:commentRss>
		</item>
		<item>
		<title>US Army allows access to blogs and other Social Media</title>
		<link>http://www.opsecprofessionals.org/blog/us-army-allows-access-to-blogs-and-other-social-media/</link>
		<comments>http://www.opsecprofessionals.org/blog/us-army-allows-access-to-blogs-and-other-social-media/#comments</comments>
		<pubDate>Fri, 12 Jun 2009 15:24:07 +0000</pubDate>
		<dc:creator>chris.cox</dc:creator>
		
		<category><![CDATA[Social Media]]></category>

		<category><![CDATA[Army OPSEC]]></category>

		<category><![CDATA[OPSEC social media]]></category>

		<category><![CDATA[OSPEC Blog]]></category>

		<guid isPermaLink="false">http://www.opsecprofessionals.org/blog/?p=51</guid>
		<description><![CDATA[According to Federal Computer Week (http://fcw.com/articles/2009/06/11/army-social-media.aspx?s=fcwdaily_120609), the US Army has directed network managers across the country to stop blocking certain Web 2.0 sites, such as Flickr Twitter, Photobucket, MySpace and Live365. 


No related posts.

Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.]]></description>
			<content:encoded><![CDATA[<p>According to Federal Computer Week (<a href="http://fcw.com/articles/2009/06/11/army-social-media.aspx?s=fcwdaily_120609">http://fcw.com/articles/2009/06/11/army-social-media.aspx?s=fcwdaily_120609</a>), the US Army has directed network managers across the country to stop blocking certain Web 2.0 sites, such as Flickr and Twitter. Photobucket, MySpace and Live365 are to be blocked.</p>
<p>The rationale, as reflected in the order, is that: “The intent of senior Army leaders to leverage social media as a medium to allow soldiers to ‘tell the Army story’ and to facilitate the dissemination of strategic, unclassified information, the social media sites available from the Army homepage will be made accessible from all campus area network.&#8221;</p>
<p>Many of us OPSEC&#8217;ers may have mixed feelings about this. While it is an opportunity to leverage emerging technologies and foster technical development within the military, there always remains the possibility of an inadvertent release of information.</p>
<p>But, at the same time, the reality is that it&#8217;s not the technology that&#8217;s the problem, and it&#8217;s certainly not going away. The problem lies within the users, and a relatively small number at that. The problem, to put it in it&#8217;s most basic terms, is not &#8220;what&#8221; the technology allows, but &#8220;how&#8221; it is used.</p>
<p>So, once again, it comes down to training. And with this recent order, it will be especially critical for all of you &#8220;Army OPSEC&#8217;ers&#8221; out there. Training and awareness are the two greatest tools in an OPSEC professional&#8217;s arsenal, and it&#8217;s the focus and dedication of each one of you that will keep OPSEC effective and relevant to today&#8217;s threats.</p>
<p>While unsung, you&#8217;re the last line of defense between your critical information and an adversary that wants it.</p>
<br/><a href="http://www.socialmarker.com/?link=http://www.opsecprofessionals.org/blog/us-army-allows-access-to-blogs-and-other-social-media/&title=US+Army+allows+access+to+blogs+and+other+Social+Media&text=According+to+Federal+Computer+Week+%28http%3A%2F%2Ffcw.com%2Farticles%2F2009%2F06%2F11%2Farmy-social-media.aspx%3Fs%3Dfcwdaily_120609%29%2C+the+US+Army+has+directed+network+managers+across+the+country+to+stop+blocking+certain...&tags=" target="_blank"><img src= "http://www.socialmarker.com/bookmark.gif" border="0" /></a><noscript><a href="http://www.socialmarker.com" >Social Bookmarking</a></noscript><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save?&amp;linkurl=http%3A%2F%2Fwww.opsecprofessionals.org%2Fblog%2Fus-army-allows-access-to-blogs-and-other-social-media%2F&amp;linkname=US%20Army%20allows%20access%20to%20blogs%20and%20other%20Social%20Media"><img src="http://www.opsecprofessionals.org/blog/wp-content/plugins/add-to-any/share_save_120_16.png" width="120" height="16" alt="Share/Save/Bookmark"/></a>

<p>No related posts.</p>
<p>Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.</p>]]></content:encoded>
			<wfw:commentRss>http://www.opsecprofessionals.org/blog/us-army-allows-access-to-blogs-and-other-social-media/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Back in the saddle again!</title>
		<link>http://www.opsecprofessionals.org/blog/back-in-the-saddle-again/</link>
		<comments>http://www.opsecprofessionals.org/blog/back-in-the-saddle-again/#comments</comments>
		<pubDate>Sun, 07 Jun 2009 07:23:38 +0000</pubDate>
		<dc:creator>chris.cox</dc:creator>
		
		<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://www.opsecprofessionals.org/blog/?p=49</guid>
		<description><![CDATA[Well, it&#8217;s been a while since I&#8217;ve blogged here. No good reason, really, sometimes things get busy, and&#8230; well, you just forget that you even have a blog. You know how it goes.
Since my last post, a lot has happened. The National OPSEC Conference was a lot of fun, and OSPA had a very siccessful [...]


No related posts.

Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.]]></description>
			<content:encoded><![CDATA[<p>Well, it&#8217;s been a while since I&#8217;ve blogged here. No good reason, really, sometimes things get busy, and&#8230; well, you just forget that you even have a blog. You know how it goes.</p>
<p>Since my last post, a lot has happened. The National OPSEC Conference was a lot of fun, and OSPA had a very siccessful presence. As a result, OSPA has started working with the UN, NATO, several Law Enforcement Agencies, and a few Neighborhood Watch groups. It&#8217;s great to see OPSEC spreading like it is!</p>
<p>Updated the home page- it was time for another change!</p>
<p>Anyways, thanks for reading; more soon!</p>
<p>Chris</p>
<br/><a href="http://www.socialmarker.com/?link=http://www.opsecprofessionals.org/blog/back-in-the-saddle-again/&title=Back+in+the+saddle+again%21&text=Well%2C+it%26%238217%3Bs+been+a+while+since+I%26%238217%3Bve+blogged+here.+No+good+reason%2C+really%2C+sometimes+things+get+busy%2C+and%26%238230%3B+well%2C+you+just+forget+that+you+even+have+a+blog.+You+know+how+it+goes.&tags=" target="_blank"><img src= "http://www.socialmarker.com/bookmark.gif" border="0" /></a><noscript><a href="http://www.socialmarker.com" >Social Bookmarking</a></noscript><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save?&amp;linkurl=http%3A%2F%2Fwww.opsecprofessionals.org%2Fblog%2Fback-in-the-saddle-again%2F&amp;linkname=Back%20in%20the%20saddle%20again%21"><img src="http://www.opsecprofessionals.org/blog/wp-content/plugins/add-to-any/share_save_120_16.png" width="120" height="16" alt="Share/Save/Bookmark"/></a>

<p>No related posts.</p>
<p>Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.</p>]]></content:encoded>
			<wfw:commentRss>http://www.opsecprofessionals.org/blog/back-in-the-saddle-again/feed/</wfw:commentRss>
		</item>
	</channel>
</rss>
