http://www.washingtonpost.com/wp-dyn/content/article/2005/09/29/AR2005092901862.html By JENNIFER TALHELM The Associated Press September 29, 2005 WASHINGTON -- An investigation of the computer systems in several Interior Department offices found numerous security flaws that threaten the department's overall computer security and must be fixed, according to an internal report. Tests by the Interior Department's Office of the Inspector General found several bureaus and offices "still suffer from serious weaknesses in their security posture," Inspector General Earl Devaney wrote in a Sept. 6 memo to Assistant Secretary Lynn Scarlett. According to the report, obtained by The Associated Press on Thursday, investigators several times were able to masquerade as authorized users, roam the internal networks of some of the department's most sensitive computer systems and manipulate data. The tests were performed in phases beginning in November 2004. But Devaney said the department has balked at fixing the system. "Rather than simply accepting the results of our testing and promptly addressing the underlying vulnerabilities, the department and bureaus have, to date, expended considerable time and energy debating our findings, challenging our methodology and impugning the credentials and integrity of our staff and contractors," Devaney wrote. "I do not wish to repeat this past experience," he added, suggesting the department work to fix the problem. Interior Department spokesman Dan DuBray said the investigation was done as part of an internal effort to identify any "potential weaknesses or conceivable potential vulnerabilities." The department's computer security has been challenged recently as part of a class-action lawsuit in which thousands of American Indians accuse the department of cheating them out of billions of dollars by mismanaging oil, gas, grazing, timber and other royalties from their land since 1887. Plaintiffs have asked that a federal district court judge order Interior Secretary Gale Norton to shut down the information technology systems to protect data. DuBray said the department will continue to aggressively work to strengthen the computer systems, "which are now among the most intricately examined in all of government." -=- On the Net: Interior Department: http://www.doi.gov _________________________________________ InfoSec News v2.0 - Coming Soon! http://www.infosecnews.org
This archive was generated by hypermail 2.1.3 : Mon Oct 03 2005 - 05:55:10 PDT