U.S. Ballistic Missile Systems Lack Cybersecurity

U.S. Ballistic Missile Systems Lack Cybersecurity

A Department of Defense report found no anti-virus, no data encryption and no multi factor authentication.

A report put together by the Department of Defense found that the U.S.' ballistic missile system lacked data encryption, antivirus programs and multifactor authentication methods. The report also found that some 28-year-old vulnerabilities remain unresolved.

The report was put together earlier this year after DOD officials inspected five random locations where the Missile Defense Agency (MDA) had placed ballistic missiles part of the Ballistic Missile Defense System (BMDS), a DOD program developed to protect US territories by launching ballistic missiles to intercept enemy nuclear rockets. The recent security audit concluded that "the Army, Navy and MDA did not protect networks and systems that process, store, and transmit BMDS technical information."

Auditors found several problematic areas, including the fact that multi factor authentication was not consistently used. Under normal circumstances, any new MDA employee would receive a username and password that they could use to access BMDS' network. As new employees are eased into their new jobs, they'd also receive a common access card (CAC) that they'd have to enable for their accounts and use together with their password, as a second-factor authentication. Normal procedure says that all new MDA workers must use multi factor authentication within two weeks of being hired.

The DOD found that at three of the five locations, investigators found that many users did not enable multi factor authentication for their accounts, and were still using their username and password to access BMDS' network.

The DOD also found that vulnerabilities were not consistently patched, removable media data was not encrypted and no intrusion detection and prevention system was ever implemented. 

 On top pf the cybersecurity concerns, there were also vulnerabilities in the physical security of the locations. For example, MDA personal didn't challenge auditors who entered buildings without proper badges, allowing unauthorized personnel to wander around through top secret buildings.

The MDA currently has 104 ballistic missile locations and plans to build another 10, but if it doesn't improve both its physical and cybersecurity protections, these bases could easily be attacked in case of a conflict.

To see the full report, click here.

About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

  • Progressing in Capabilities

    Progressing in Capabilities

    Hazardous areas within industries like oil and gas, manufacturing, agriculture and the like, have long-sought reliable video surveillance cameras and equipment that can operate safely in these harsh and unpredictable environments. Read Now

  • A Comprehensive Nationwide Solution

    A Comprehensive Nationwide Solution

    Across the United States, manufacturing facilities, distribution centers, truck yards, parking lots and car dealerships all have a common concern. They are targets for catalytic converters. In nearly every region, cases of catalytic converter thefts have skyrocketed. Read Now

  • Planning for Your Perimeter

    Planning for Your Perimeter

    The perimeter is an organization’s first line of defense and a critical element of any security and surveillance program. Even if a building’s interior or exterior security is strong, without a solid perimeter surveillance approach any company or business is vulnerable. Read Now

  • The Key Issue

    The Key Issue

    It is February 2014. A woman is getting ready in her room on a cruise ship when she hears a knock on the door; it is a crewmember delivering breakfast. She is not presentable so she tells him to leave it by the door. Read Now

Featured Cybersecurity

New Products

  • ComNet CNGE6FX2TX4PoE

    The ComNet cost-efficient CNGE6FX2TX4PoE is a six-port switch that offers four Gbps TX ports that support the IEEE802.3at standard and provide up to 30 watts of PoE to PDs. It also has a dedicated FX/TX combination port as well as a single FX SFP to act as an additional port or an uplink port, giving the user additional options in managing network traffic. The CNGE6FX2TX4PoE is designed for use in unconditioned environments and typically used in perimeter surveillance. 3

  • VideoEdge 2U High Capacity Network Video Recorder

    VideoEdge 2U High Capacity Network Video Recorder

    Johnson Controls announces a powerful recording solution to meet demanding requirements with its VideoEdge 2U High Capacity Network Video Recorder. This solution combines the powerful capabilities of victor with the intelligence of VideoEdge NVRs, fueled by Tyco Artificial Intelligence, for video management that provides actionable insights to save time, money and lives. 3

  • CyberAudit Introduced to Manage Systems, Intuitive Interface

    CyberAudit Web

    CyberLock, Inc. announces the release of CyberAudit Web 9.4! CyberAudit-Web (CAW), the software suite for managing CyberLock systems, provides an intuitive interface to assign keys, set expirations, monitor staff and configure access schedules. 3