US air traffic control networks open to hack attack
High-tech networks that link key parts of the US air traffic control system lack important controls and are potentially vulnerable to hackers and others familiar with how those computer programs work, congressional investigators say. In an update to a 2000 report, the Government Accountability Office (GAO) said on Monday the Federal Aviation Administration (FAA) has made progress in protecting IT systems and noted the agency's contention that its interconnected networks are secure. An FAA spokesman said separately the investigation was too narrowly focused and the agency has adequate controls in place nationwide. He said: "They are very secure systems. There is a lot that the [report] failed to take into account." He added that any vulnerabilities are countered by several redundancies and other controls built throughout the IT architecture. But the GAO, the investigative arm of Congress, nevertheless disclosed a series of gaps that include outdated security plans, inadequate awareness training, and questions about whether the FAA could detect intruders and keep the system up during a security breach. The GAO found: "The agency has not adequately managed its networks, software updates, user accounts and passwords and user privileges." Other information security controls - including physical security and background investigations - also have shortcomings that are not mitigated by special operating systems and custom software. According to the GAO: "The proprietary features of these systems cannot fully protect them from attacks by disgruntled current or former employees who are familiar with these features nor will they keep out more sophisticated hackers." These networks help provide flight tracking and other information to air traffic controllers and flight crews. They serve hundreds of airport towers, approach control centres and facilities for handling high-altitude traffic. The GAO concluded: "Interruptions of service by these systems could have a significant impact on air traffic nationwide." The nation's air traffic system handled more than 46 million flights in 2004. More than 640 million people flew on commercial planes. At any one time, as many as 7,000 aircraft were in the air. The GAO review was conducted at FAA headquarters and three other sites.
Reproduced from an article published by Silicon.com
© Silicon.com
The original article can be viewed here:
http://software.silicon.com/security/0,39024655,39152785,00.htm
Permalink Bookmark Digg this story
