Key networks not secured http://www.theregister.co.uk/2009/10/20/nasa_security/
By Dan Goodin in San Francisco * Get more from this author Posted in Crime, 20th October 2009 17:51 GMT A former NASA scientist who helped discover evidence of water on the moon has been arrested on charges he tried to sell Israel classified information about US military satellite systems. Stewart Nozette, 52, of Maryland, was arrested in a sting in which an FBI agent posed as an Israeli intelligence officer. According to federal prosecutors, he demanded money and a new Israeli passport in exchange for the sensitive information, which he obtained while working with a high security clearance for the US space agency. The charges came Monday, just a few days after a government watchdog agency warned congress that NASA has failed to adequately secure its computer networks against hackers, terrorists, and hostile nations. The report (PDF) from the Government Accountability Office cited a long list of shortcomings, including the lack of sufficient systems to authenticate users who access the system. The shortcomings "make it possible for intruders, as well as government and contractor employees, to bypass or disable computer access controls and undertake a wide variety of inappropriate or malicious acts," the report concluded. "As a result, increased and unnecessary risk exists that sensitive information is subject to unauthorized disclosure, modification, and destruction and that mission operations could be disrupted." NASA networks and systems have already been successfully targeted by attackers, the report said. During fiscal years 2007 and 2008, NASA reported 1,120 incidents that resulted in malware being installed and unauthorized access to sensitive information. Last year, the space agency established a security operations center to prevent attacks. While NASA has made important progress in securing its networks, it still faces serious shortcomings. "NASA has not yet fully implemented key activities of its information security program to ensure that controls are appropriately designed and operating effectively," the report said. "Despite actions to address prior security incidents, NASA remains vulnerable to similar incidents." The charges leveled against Nozette suggest that NASA isn't the only US government agency that was affected by the breach. In addition to his research into lunar poles, he also held top security clearances from the Energy Department's Lawrence Livermore National Laboratory. *********************************** * POST TO [email protected] * *********************************** Medianews mailing list [email protected] http://lists.etskywarn.net/mailman/listinfo/medianews
