Health & Safety

October 10, 2013

Be more vigilant: Protect passwords, government systems

Brandice J. O’Brien
Tinker Public Affairs

TINKER AIR FORCE BASE, Okla.  — In an era when identities can be easily stolen and networks compromised, Air Force Sustainment Center officials are urging its network users to be more careful. By adhering to two requests, the number of attempted hacker intrusions and virus downloads can be drastically reduced.

Officials stress that network users should never plug non-government USB devices including cell phones and MP3 chargers into the system. Also, if user names and passwords must be sent via email, send them in separate and encrypted messages. That way if someone does hack into a message, he doesn’t have both the user name and the password. Air Force systems include the Air Force Portal, My Pay, Thrift Savings Plan and the Employee Benefits Information System.

“USB devices can easily spread malicious logic,” said Staff Sgt. Ryan Gebert, 78th Air Base Wing Network Security noncommissioned officer in charge.

Prinston Wilson, 72nd ABW/SC Information Assurance officer who also handles network violations and credential disclosures, agreed.

“We pick up a lot of things on our cell phones. If you’re using your phone as a flash drive and saving to it, and it picks up a virus; once it gets into our system it work its way up,” Mr. Wilson said. “Credential disclosures have become a growing problem. Hackers can do a lot with your information. They can take your social security number, job history and personal data, put the data together and use it to gain access into other systems.”

In August, there were 12 reported AFSC violations, three for USB incidents and nine for account credential disclosures, or ACDs.

Mr. Wilson said oftentimes a credential disclosure occurs when a user is in a rush and sends their list of user IDs and passwords unencrypted through email to their personal email address. When these user IDs and passwords are sent unencrypted, they can easily be picked up by hackers and used to gain unauthorized access to government systems.

“Usually people keep the same password for a lot of systems and when hackers find out one password, they can figure out access into other systems,” he said.

If a USB violation or credential disclosure is found on a government system, the account is disabled and only a commander – colonel or above – can unlock the account. The commander will also have to fill out a memo explaining the incident and actions that were taken.

“USB violations have been reduced dramatically over the past eight months due to Group Policy Object capability being implemented,” said Ryan Moorman, AFSC Logistics Portal Content manager at Wright-Patterson Air Force Base, Ohio. “Robins Air Force Base, Ga., implemented this capability first and has had no USB violations since.”

The GPO capability is a policy that forces a computer to block a driver from being loaded when a flash device is plugged in. The driver is the necessary component that lets an operating system and flash drive communicate. Without a driver, a computer won’t read a USB, Mr. Moorman said.

“There is no steady trend of ACDs based off the statistics of the past six months, however due to the sudden rise in August, leadership looked to create awareness on the issues across the center,” Mr. Moorman said.




All of this week's top headlines to your email every Friday.


 
 

 

Guard Muster brings Arizona together

(U.S. Army National Guard photo by Staff Sgt. Brian A. Barbour) Arizona National Guard Soldiers from the 158th Maneuver Enhancement Brigade stand in formation on the field at Arizona State University’s Sun Devil Stadium, Dec. 7 in Tempe. The formation, which was part of the Arizona National Guard Muster and Community Expo, was the first...
 
 
NORAD_pict

NORAD prepares to track Santa’s flight

PETERSON AIR FORCE BASE, Colo. (AFNS) — The North American Aerospace Defense Command’s NORAD Tracks Santa website, http://www.noradsanta.org, launched Dec. 1, featuring a mobile version, a holiday countdown, new games a...
 
 

Air Force not planning Involuntary Force Reductions in 2015

FORT GEORGE G. MEADE, Md. – The modern Air Force is “feeling some strain” recently, due to its shrinking size and high operations tempo, but there won’t be any more involuntary force-shaping in 2015, Secretary of the Air Force Deborah Lee James said today. James said she and Air Force Chief of Staff Gen. Mark...
 

 

Local Briefs December 19, 2014

NARFE chapter 55 to meet January 12, 11 a.m. – Golden Corral The National Active and Retired Federal Employees (NARFE) Association, Chapter 55, will hold their next monthly luncheon meeting on Monday January 12, 2015 at the Golden Corral, 4380 East 22nd Street, Tucson, AZ 85711.  The luncheon starts at 11 a.m. and ends about...
 
 

New Commander addresses Airmen of 12th Air Force

To all of the 12th Air Force Community, Happy Holidays! My wife Kristan, my three children, and I are excited to join this outstanding 12th AF community.  I cannot adequately express how honored and humbled I feel to join this community as the Commander.   I certainly appreciate the exceptional efforts of General and Mrs....
 
 
(AFSOUTH)

New commander to take reins of 12th AF, AFSOUTH

Twelfth Air Force and Air Forces Southern will welcome a new commander during a change of command ceremony Dec. 19 at 10 a.m. at Davis-Monthan Air Force Base. Major Gen. Chris Nowland will be promoted to the rank of lieutenant ...
 




0 Comments


Be the first to comment!


Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>


Directory powered by Business Directory Plugin