Slashdot Mirror
Chinese Hack Attacks on DoD Networks Coordinated
An anonymous reader writes " The Naval Network Warfare Command says that Chinese hackers are relentlessly targeting Defense Department networks with cyber attacks. The 'volume, proficiency and sophistication' of the attacks supports the theory that the attacks are government supported. The motives of the attacks emanating from China include technology theft, intelligence gathering, exfiltration, research on DOD operations and the creation of dormant presences in DOD network for future action. Onlookers warn that current US defenses against these attacks are 'dysfunctional', and that more aggressive measures should be taken to ensure government network safety."
Why in the hell do you have your secret and SCI sides on the internet? That's DOD/DOE no-no number one!
Separate systems, separate networks, separate terminals.
I can tell you from my experience as a person who contracts as a "Q" that not only is the DOE stepping up their security methods, they're cutting funding to places that don't keep the mustard. LANL may be cut at the end of this FY -- thanks to the fiasco a few weeks ago where someone walked out of the labs with thumb drives of info. Needless to say, they were audited, and they brought out a lot of epoxy to glue down the USB/Firewire ports.
Also, weak passwords should be pretty much a thing of a past -- now that DOE's mandating that everyone use CryptoCards in the next year-ish (no, not those expensive RSA things -- they're out of a company in Canada).