NCJ Number
124799
Date Published
1989
Length
17 pages
Annotation
An analysis of records from the National Aeronautics and Space Administration (NASA) showed that between 1981 and March 1989, unauthorized users successfully gained access dozens of times to computers in the Space Physics Analysis Network (SPAN) and used the SPAN network to gain access to other SPAN computers located at NASA and another Federal agency.
Abstract
SPAN is one of NASA's unclassified computer networks. It provides a system for scientists to share unclassified data and ideas and to collaborate on space-related NASA research efforts. It serves an estimated 100,000 individual users and connects computers in the public and private sectors in the United States and many other countries. NASA officials believe that no data have been altered or destroyed during the unauthorized access, but they recognize that they may not be aware of all past cases of unauthorized entry or the damage that may have resulted. The unauthorized entry may also impose other costs. Contrary to Federal and agency requirements, NASA has not performed a security risk analysis for SPAN. Therefore, it should perform and document this analysis and discuss further actions to be taken to correct the existing weakness in its internal controls.