The Pentagon’s Bug Bounty Program Should Be Expanded to Bases, DOD Official Says
From Defense One
The ‘best and brightest’ hackers could accelerate the search for vulnerabilities across some of the Defense Department’s broader critical infrastructure.http://www.defenseone.com/technology/2017/04/pentagons-bug-bounty-program-should-be-expanded-americas-military-bases-dod-official-says/137229/The Hack the Pentagon bug bounty program that allowed citizens to test the defenses of Defense Department websites could soon see a spinoff inviting hackers to probe the Pentagon’s critical infrastructure.
Building and electrical systems, HVAC equipment and other critical infrastructure laden with internet-connected sensors often run on operating systems unsupported by vendors. Even as the Pentagon pushes to upgrade its information systems to Windows 10 by this year, its critical infrastructure remains woefully behind.
“About 75 percent of the devices that are control systems are on Windows XP or other nonsupported operating systems,” said Daryl Haegley, program manager for the Office of the Assistant Secretary of Defense for Energy, Installations and Environment.
Haegley, speaking Thursday at an event hosted by OSIsoft, said the assessment was based on visits to 15 military sites. Microsoft stopped providing support for Windows XP in 2014. Haegley, however, said some of the systems that run DOD facilities are far older.
Follow @contentjunkie to stay up to date on more great posts like this one.
This post has been ranked within the top 80 most undervalued posts in the second half of Apr 29. We estimate that this post is undervalued by $2.33 as compared to a scenario in which every voter had an equal say.
See the full rankings and details in The Daily Tribune: Apr 29 - Part II. You can also read about some of our methodology, data analysis and technical details in our initial post.
If you are the author and would prefer not to receive these comments, simply reply "Stop" to this comment.