Hackers Had 'full Functional Control' of Nasa Computers (2march2012)

[güttsfükk]

Hackers gained "full functional control" of key Nasa computers in 2011, the agency's inspector general has told US lawmakers.

Paul K Martin said hackers took over Jet Propulsion Laboratory (JPL) computers and "compromised the accounts of the most privileged JPL users".

He said the attack, involving Chinese IP addresses, was under investigation.

In a statement, Nasa said it had "made significant progress to protect the agency's IT systems".

Mr Martin's testimony on Nasa's cybersecurity was submitted to the House Committee on Science, Space and Technology's Subcommittee on Investigations and Oversight.

State of security

In the document, he outlined how investigators believed the attack had involved "Chinese-based internet protocol [IP] addresses".

He said that the attackers had "full system access" and would have been able to "modify, copy, or delete sensitive files" or "upload hacking tools to steal user credentials and compromise other Nasa systems".

Mr Martin outlined how the agency suffered "5,408 computer security incidents" between 2010 and 2011.

He also noted that "between April 2009 and April 2011, Nasa reported the loss or theft of 48 Agency mobile computing devices".

In one incident an unencrypted notebook computer was lost containing details of the algorithms - the mathematical models - used to control the International Space Station.

Nasa told the BBC that "at no point in time have operations of the International Space Station been in jeopardy due to a data breach".

Mixed motives

Mr Martin said Nasa was a "target-rich environment for cyber attacks".

He said that the motivation of the hackers ranged from "individuals testing their skill to break into Nasa systems, to well-organized criminal enterprises hacking for profit, to intrusions that may have been sponsored by foreign intelligence services".

But while Mr Martin criticised aspects of Nasa's cybersecurity he noted investigations had resulted in "arrests and convictions of foreign nationals in China, Great Britain, Italy, Nigeria, Portugal, Romania, Turkey, and Estonia".

Nasa said it was working to implement the security improvements Mr Martin suggested in his testimony.

However the chairman of the congressional subcommittee, Rep Paul Broun, quoted in an online report of proceedings, said: "Despite this progress, the threat to Nasa's information security is persistent, and ever changing. Unless Nasa is able to constantly adapt - their data, systems, and operations will continue to be endangered."

source : http://www.bbc.co.uk/news/technology-17231695

[Steve]

And people laugh at me because I wont use Internet banking, mmmmm wonder why not.

[Faline]

[shoottokill]

future trend for sure. its a major threat. critical infrastructure will be hacked into and used against us. NASA is another story, but look out...computer whores are getting more brazen and it will impact us.

[MEMOR3X]

Originally Posted by Steve.

And people laugh at me because I wont use Internet banking, mmmmm wonder why not.

Neither did John McClane, but his life savings still got wiped out in Die Hard 4.0 by a bunch of hackers.

Your account is still "digital" - what do you think the banks clerks are doing sitting at computers? They ain't playing BF3!

[Parannoyed]

That just made the pentagon sound like a bunch of kids holding out a warehouse with some computers in it how are they getting rinsed so much

[ices]

Originally Posted by Parannoyed

That just made the pentagon sound like a bunch of kids holding out a warehouse with some computers in it how are they getting rinsed so much

Dont underestimate the Chinese mentality for stealing, copying and envy.

[Steve]

Originally Posted by MEMOR3X

Neither did John McClane, but his life savings still got wiped out in Die Hard 4.0 by a bunch of hackers.

Your account is still "digital" - what do you think the banks clerks are doing sitting at computers? They ain't playing BF3!

Did you deal with a lot of cyber crime in the force?

[Blu]

How come this doesn't bother me, and it doesn't surprise me at all. That in of itself makes me sad.

[kellyhound]

ongoing battle between hackers and internet security.