Paul Martin, NASA’s Inspector General, gave written testimony in a House committee earlier this week detailing the security threats faced by their IT infrastructure. The thrust of the document is that NASA needs to double down on cybersecurity but, naturally, needs more money to do so.
Their IT budget is $1.5 billion, but of that only $58 million was spent on security. Considering the enormous network of datacenters, laptops, operations centers, and research labs scattered around the world, this may not be nearly enough. As it is, in the last two years NASA has been hacked thousands of times. In one instance, the hackers gained full access to some NASA systems and credentials for 150 employees.
NASA counted 5,408 security breaches where some access was given or malicious software was installed. In 2011 alone they had 47 attacks they described as “advanced persistent threats,” serious attacks by well-funded “individuals or nations.” Of those, 13 succeeded, and one attack based in China gained complete access to Jet Propulsion Laboratory (JPL) systems — read, write, delete, add and delete users, modify logs, everything.
