Study: Web exposes data on CIA networks

Security firm claims to have mapped unclassified networks in surprising detail

By Dan Verton

Mar. 11, 2002

A London-based Internet security and risk consulting firm last week published the results of a two-day study that highlights in surprising detail the CIA's primary points of presence on the public Internet.

Using open, legal sources of information and without conducting any illegal port scanning or intrusive network probes, Matta Security Ltd. produced a detailed map of nonclassified CIA networks, including several that aren't readily available to the public. Matta's study also uncovered the names, e-mail addresses and telephone numbers of more than three dozen CIA network administrators and other officials.

A CIA spokeswoman cast doubt on the significance of the report, stating that there are many IT professionals within the agency who are "overt" employees and need to have Internet access.

However, some security experts, although vague about the specific nature of potential vulnerabilities such information could be used to exploit, noted the possible threat from determined adversaries who might be able to use the information to obtain more sensitive or secret information or for other forms of attack planning.

snip-

Read Complete Article Here