NCJ Number
150807
Journal
Security Awareness Bulletin Issue: 2-94 Dated: (August 1994) Pages: 19- 22
Date Published
1994
Length
4 pages
Annotation
This article uses the case of a computer system intrusion at the Boeing Company to illustrate the need for a corporate commitment to protect information adequately.
Abstract
The company was initially notified by an outside vendor that a previously inactive account had been very active for at least one month. Investigation revealed that the intruders were using a conventional modem and off-the-shelf software to steal local area network password files and gain access to several valid user accounts. The intruders had used the violated computer system to establish trusted network connections with other systems inside and outside the company. Taking advantage of these connections, the hackers were able to gain unauthorized access to other commercial industry, government agency, and educational systems. The company organized a response team comprised of computer specialists, technology support personnel, and computing security representatives, as well as the FBI, which monitored the intruders' ongoing activity until they could be apprehended. While these hackers were typical of nondestructive intruders, they not only stole company computer time, but they were also able to compromise the integrity of a huge volume of information. This article calls on government and private industry to begin communicating openly about the threat and developing better security systems.