United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office Accounting and Information Management Division author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 1996-05-22 monographic deposited born digital 11 p. GA 1.13:T-AIMD-96-92 https://www.govinfo.gov/app/details/GAOREPORTS-T-AIMD-96-92 P0b002ee180382291 f:ai96092t DGPO 2010-08-12 2011-03-28 GAOREPORTS-T-AIMD-96-92 machine generated eng fdlp REPORT GAOREPORTS-T-AIMD-96-92 T-AIMD-96-92 Computer crimes Computer security Hackers Computer networks Terrorism Defense communications operations Information resources management Confidential records Internet Testimony AIMD Unknown and unauthorized persons are increasingly attacking and gaining access to highly sensitive information in the Defense Department's (DOD) computer systems. Although the exact number of attacks cannot be precisely determined, recent data suggest that DOD may have experienced as many as 250,000 attacks last year. These attacks are often successful, and the number of attacks is doubling each year as Internet use increases and hackers become more sophisticated. At a minimum, these attacks are a multimillion dollar nuisance to the Pentagon. At worst, they pose a serious threat to national security. Attackers have seized control of entire DOD systems, some of which control critical functions, such as weapons system research and development, logistics, and finance. Attackers have also stolen, modified, and destroyed data and software. The potential for catastrophic damage is great. DOD is taking steps to address this growing problem but faces major challenges in controlling unauthorized access to its computer systems. DOD is now trying to react to successful attacks as it learns of them, but it has no uniform policy for assessing risks, protecting its systems, responding to incidents, or assessing damage. Training of users and system and network administrators is haphazard and constrained by limited resources. Technical solutions, such as firewalls, smart cards, and network monitoring systems, should help, but their success depends on whether DOD implements them in tandem with better policy and personnel measures. https://www.govinfo.gov/content/pkg/GAOREPORTS-T-AIMD-96-92/html/GAOREPORTS-T-AIMD-96-92.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-T-AIMD-96-92/pdf/GAOREPORTS-T-AIMD-96-92.pdf GAO/T-AIMD-96-92 https://www.govinfo.gov/app/details/GAOREPORTS-T-AIMD-96-92 Testimony GAO/T-AIMD-96-92; Information Security: Computer Attacks at Department of Defense Pose Increasing Risks; Computer crimes Computer security Hackers Computer networks Terrorism Defense communications operations Information resources management Confidential records Internet