G-01-010
Assessment of Information Technology Security
Vulnerabilities at a NASA Installation

(October 22, 2001)


EXECUTIVE SUMMARY

The Office of Inspector General performed an assessment of information technology security (ITS) vulnerabilities at a NASA installation to determine the security and functionality of the Headquarters network infrastructure, to assess the presence of suspicious traffic patterns on the installation's computer network, and to determine the information technology staff's awareness of and response to such network traffic. We also reviewed the procedures used by the installation's staff to find and eliminate vulnerabilities in their own systems. We made five recommendations for specific improvements. NASA management concurred with all five recommendations.

This report contains information that may not be releasable to the general public.


Rev. January 14, 2002