farrellj's Journal: Canada's Defense Department's systems compromised

It seems that over the past year has had their computers and networks compromised repeatedly. Now, that is not as bad as it sounds...no security is perfect, and that is why you also have to build security in depth, with Intrusion Detection Systems, and proceedures to minimise the damage when a cracker gets in. But...we don't know how much damage was done, and if ultra secure systems were compromised. Here is what part of the report says:

  "They also logged five cases of "unauthorized limited access" and 35 instances of "malicious logic" -- the attempted introduction of viruses, worms or other unwanted programs into a computer system.

There were 110 cases of "poor security practice" on the part of employees, by far the most common problem last year. Of these, the majority involved concerns about the security of e-mail transmissions.

Others stemmed from use of Internet Relay Chat messaging and the popular KaZaa file-sharing service, inappropriate storage of materials, and unauthorized Web postings. Another case involved improper access to a network."

You can read the entire article here

ttyl
          Farrell