NASA Lost Classified Data
Network visibility could have prevented this attack
Recently, NASA's network was breached and classified secrets were stolen. The attacker entered the network through a connected, unsecured IoT device which was unseen by NASA's network administrators.
The device, a Raspberry Pi, was used to run tests. Once compromised, the attacker was able to remain in the network for 10 months before being discovered. A post-breach network audit was conducted, and several other, unknown devices were discovered in the network.
NASA administrators were unable to identify these devices in their network, a common problem for IT departments worldwide. The ability to visualize the network - to identify devices connected, at any time, as well as their communications - is essential to identifying hidden devices, especially if they begin acting strangely.
NASA's team suffered from:
- The lack of ability to identify devices
in the network - Inadequate staffing
- Insecure IoT devices installed by employees
NASA's problems may be yours
- Traditional security tools are ineffective against advanced, unknown threats.
- Hidden devices, communications, and misconfigurations are unnoticed, which create risks.
- Limited budgets and understaffed teams leave attacks unnoticed and solutions in short supply.
- Using existing infrastructure against advanced attacks is hard to do efficiently.