FAA systems compromised E-mail
by Jake Widman   
Saturday, 09 May 2009
A report from the U.S. Department of Transportation reveals that Federal Aviation Administration computer systems are vulnerable to intruders.

The report (PDF), titled "Review of Web Applications Security and Intrusion Detection in Air Traffic Control Systems," summarizes the results of a security audit.

The audit was undertaken to see if the increasing use of commercial software and Web applications by the FAA -- mostly to provide public information -- is making its systems more vulnerable to cyber-attack.

Investigators also wanted to see if the systems' intrusion-detecting capabilities were effectively monitoring security incidents.

According to the report, the agency's systems failed on both counts.

The investigators managed to gain unauthorized access to air traffic control (ATC) systems in several places. They also found that intrusion detection sensors have been installed at only 11 operational facilities (out of hundreds).

So far, the incidents have mainly disrupted the ATC support systems, not the actual operational systems. The report's authors warn that attacks can easily bridge that gap.

"In our opinion, unless effective action is taken quickly, it is likely to be a matter of when, not if, ATC systems encounter attacks that do serious harm to ATC operations," reads the report.

The report concludes with several recommendations, which boil down to "do more, do it better, do it quicker."

Tags See All Tags


FAA 
Powered By Joomla Tags

Please enable JavaScript in your browser to post your comment!

 
< Next story in category   Previous story in the category >
iTWire user statistics Visitors last 30 days
694,279
Subscribers 15,210
#1 independent technology news advertise here
  •   *  
  • Search
  • AdvSeach
  • Login
  • Events
  • FreeStuff

- Advertisement -

Featured Whitepapers

Follow iTWire on Twitter

About iTWire

iTWire is all about technology news, information, jobs and community for the IT and telecommunications industry professional. Subscribe to our free ICT daily newsletter