Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Report: Too Much Cyber Security at CIA
Kevin Poulsen, SecurityFocus 2003-05-28

While other government agencies struggle with their cyber security practices, the Central Intelligence Agency apparently suffers from the opposite problem: too much security -- according to a recent study of the agency's use of information technology.

Comments Mode:
Report: Too Much Cyber Security at CIA 2003-05-29
Anonymous (1 replies)
Report: Too Much Cyber Security at CIA 2003-05-29
fruid (1 replies)
ALL the intelligence agencies suffer from the same problems. It's not that they are too secure, they are too cheap to spend actual money on proven systems and security mechanisms. Until recently, the NSA considered filtering routers as "firewalls" and they were generally all that was used to pretect super-secret systems.

As far as the Palm Pilots go... it's all too easy to enter secret information in one and then walk out of the building with the secret. Who's to know that you downloaded your Palm Pilot info to a site used by your Russian controller? Can we say Robert Hanssen? He's one of the ones who pushed for Palm Pilots.

Security officers at the intelligence agencies have a hard time convincing higher-ups to spend money on "real" security and spend much of their time trying to control laptops, palm pilots, two-way pagers, cell phones with radios, and even Internet access. The only reason the intelligence agencies' secrets are kept secret is that their networks are heavily screened and bulk encrypted.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/5201/20249#20249
Report: Too Much Cyber Security at CIA 2003-05-30
LumpyGames (at) hotmail (dot) com [email concealed]







 

Privacy Statement
Copyright 2009, SecurityFocus