Risk
8/6/2009
05:04 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Marine Corps Bans Social Media On Military Network

Wrestling with the changing nature of online communication and the need for operational security, the Marine Corps wants to formalize procedures for access to social sites on its network.

The U.S. Marine Corps on Monday issued a directive banning access to Internet social networking sites on the Marine Corps Enterprise Network because such sites represent a security risk.

Marine administrative message 458/09 says that social networking sites like Facebook, MySpace, and Twitter "are a proven haven for malicious actors and content and are particularly high risk due to information exposure, user generated content and targeting by adversaries."

Social networking sites create vulnerabilities that can be exploited and may expose unnecessary information to adversaries, putting military personnel at increased risk of compromise, the directive says.

The ban does not cover access to social networking sites though non-military networks. And to correct any misapprehension about that point, the Marine Corps Office of Public Affairs subsequently issued a clarification.

Marine administrative message 458/09, titled "Immediate Ban Of Internet Social Networking Sites (SNS) On Marine Corps Enterprise Network (MCEN) NIPRNET," "does not limit Marines' access to social networking sites," the Marine Corps statement insists. "Even before this message, sites such as YouTube, Facebook, MySpace and Twitter could not be accessed by Marines using the Marine Corps Enterprise Network in accordance with Marine Corps and Department of the Navy policies."

The Marine Corps says that many military organizations currently make use of social media through alternative Internet service providers. The point of the directive is to establish a formal waiver process for those who require access to social networking sites through the MCEN.

The Marine Corps statement goes on to encourage military personnel to tell their stories using social media, but to do so using personal accounts and their own ISPs while keeping operational security requirements and standards of behavior in mind at all times.

The Marine Corps has an official presence on a variety of social media sites, including Facebook, Flickr, Twitter, and YouTube.

There's a big buzz surrounding Government 2.0 -- the revolution that's bringing the principles and value of the Web as a platform to the business of governing. Attend Gov 2.0 Expo Showcase and hear innovators show how this is really happening. At the Washington Convention Center, Sept. 8. Find out more and register.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-0972
Published: 2014-08-01
The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to select a custom page table, and consequently write ...

CVE-2014-2627
Published: 2014-08-01
Unspecified vulnerability in HP NonStop NetBatch G06.14 through G06.32.01, H06 through H06.28, and J06 through J06.17.01 allows remote authenticated users to gain privileges for NetBatch job execution via unknown vectors.

CVE-2014-3009
Published: 2014-08-01
The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 through 11.0 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct ph...

CVE-2014-3302
Published: 2014-08-01
user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCuj81708.

CVE-2014-3534
Published: 2014-08-01
arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACE_POKEUSR_AREA requests, which allows local users to obtain read and write access to kernel memory locations, and consequently gain privileges, via a c...

Best of the Web
Dark Reading Radio