funsec mailing list archives

DoD Removes Missile Defense System Report From Web Site


From: "Fergie" <fergdawg () netzero net>
Date: Mon, 20 Mar 2006 18:30:18 GMT

Security thorugh obscurity?  ;-)

Via FCW.com.

[snip]

The Defense Department has removed from the DOD inspector general’s Web site a critical report that states that the 
network that links radar systems, missile sites and command centers for the Missile Defense Agency’s (MDA) ground-based 
defense system has serious flaws in the security technologies, policies and procedures needed to protect the integrity, 
availability and confidentiality of information on the network.

Federal Computer Week published a Web article March 16 and a follow-up print article today about the report, which 
states that MDA and Boeing, the prime contractor for the Ground-based Midcourse Defense (GMD) system and the GMD 
Communications Network (GCN) have allowed the use of group passwords on the unencrypted portion of the GCN rather than 
requiring individual passwords.

The report also faults MDA and Boeing for the lack of automated audit trails -- essential to catch inside or outside 
threats -- on the network.

[snip]

More here:
http://www.fcw.com/article92668-03-20-06-Web

- ferg


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg () netzero net or fergdawg () sbcglobal net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: