Fergie's Tech Blog

DOE IG: Energy's Websites Lack Security

Wade-Hahn Chan writes on FCW.com:

Visitors to Energy Department Web sites should not be redirected to pornography, the department’s Inspector General’s Office said in a report.

But that has happened, the oversight office found. DOE sites suffered 60 security incidents on public servers in the past three years, with some 22 incidents occurring in the past year, the report states.

More than half of those attacks resulted in defaced home pages, including the changing of the home page of Brookhaven National Laboratory’s Web site to route visitors to pornographic links.

The IG report also found that some sites had lax controls on publicly accessible information, resulting in eight incidents in which personally identifiable information was exposed. It noted that some of the sites did not meet National Institute of Standards and Technology standards for securing public Web servers.

posted by Fergie @ 3/19/2008 01:58:00 PM