Slashdot Mirror
Security Flaws Could Cripple Defense Network
userexec wrote to mention an FCW.com article about the uninspiring future for the Missile Defense System's software. The developers are apparently very worried about poor information security on the project. From the article: "The report said that neither MDA nor Boeing officials saw the need to install a system to conduct automated log audits on unencrypted communications and monitoring systems. Even though current DOD policies require such automated network monitoring, such a requirement 'was not in the contract.' The network, which was also developed to conform to more than 20-year-old DOD security policies rather than more recent guidelines, lacks a comprehensive user account management process, the report said. Neither MDA nor Boeing conducted required Information Assurance (IA) training for users before they were granted access to the network, the report stated. "
Someone's head is going to roll over this one. The military has been really tight on network security lately, even with contractors. A hole as big as this is simply unacceptable.
Someone save me from this sanity.
This software was probably one of the easiest parts to this whole missile defense debacle. What's worse is that there has been evel less success with the hard parts. i.e. Actually hitting incomming missiles, or even getting permission from governments such as Canada to even try to hit them over their airspace. Perhaps even harder yet is justifying the need for missile defense at all when the only likely source of a nuclear attack is from terrorists who would most likely smuggle a bomb in through the U.S.'s patchy port security and detonate it from the ground.
I tell you, this is all George Lucas' fault! The missile defense program was once called Star Wars, back when Star Wars was cool. Now the idea of shooting incomming missiles out of the sky is subconciously linked with Jar Jar Binks in the minds of the nation. Whoopsie!