Contractor jailed for poisoning database

 

Payback for cold sacking.

A former contractor at the US Transport Security Administration (TSA) was this week sentenced to two years jail for poisoning its network operations centre's upstream databases.

In October 2009 Douglas Hames Duchack tampered with code in the Terrorist Screening Database, a key information source for the administration's operations centre, which serves as a screening point for transport risks in Colorado.

"Due to effective security protections, TSA was able to detect and disrupt this attempt to corrupt a system designed to protect the traveling public," TSA Assistant Administrator for the Office of Inspection Dave Holmes said in a statement on Wednesday.

Duchack tampered with the database by removing instructional code after being told his role would be terminated, according to details from a plea agreement.

Until learning of the impending termination, he was under the belief he would only be transferred to other duties and had agreed to train his replacement.

However after training his replacement Duchack allegedly learned that he would no longer have a role at the organisation.

Duchack then accessed the terror database and deleted code from the program that was used to format birth information in connection with an arrest warrant database.

Four days later Duchack's replacement noticed code running that he believed would disrupt the TSA's security screening processes.

Duchack was told not to come back to work while the TSA alerted the FBI.

The former TSA contractor's sentence included paying over US$60,000 in retribution costs.

Copyright © iTnews.com.au . All rights reserved.


Contractor jailed for poisoning database
"A critical system? Or is it just more security theatre?"
By meski
 
 
 
Comments: 2
BaysNet
Jan 14, 2011 12:25 PM
Privileged Session Management (PSM), provides session control, proxy, audit, recording and replay of ‘high risk’ users including administrators, remote vendors and others to prevent these sort of incidents. We have the technology why can't IT Security risk management professional get it depolyed to protect critical systems like the TSA database? It can't be cost?
meski
Jan 14, 2011 12:52 PM
A critical system? Or is it just more security theatre?
Comments have been disabled for this article.
 
 
 
Top Stories
Australia turns to homegrown drones
Debating the finer points of unmanned aerial vehicle design.
 
The New Zealand telco problem
Opinion: Could Telstra save Kiwi telcos?
 
IT price probe to 'name and shame' gougers
Industry ducking the issue, committee claims.
 
Sign up to receive iTnews email bulletins
   FOLLOW US...

Latest VideosSee all videos »

Latest Comments
Polls
Should the Government enact new legislation to protect copyright holders in the digital age?

   |   View results
Yes
  20%
 
No
  80%
TOTAL VOTES: 521

Vote