ABSTRACT

On March 28, 1994, computer systems administrators at Rome Air Development Center, Griffiss Air Force Base, New York, a.k.a. "Rome Labs," learned that their computer network had been penetrated and compromised by a piece of software known as a "sniffer" that had been secretly installed on one of the computers tied into the Rome Labs computer network. The team of computer security experts and CCIs journeyed to Rome Labs and proceeded to evaluate audit trails and interview systems administrators and witnesses. Their initial investigation discovered that two unidentified individuals had electronically penetrated at least seven of the computer systems at Rome Labs and obtained complete access to all of the information resident on those systems, downloaded data files, and installed sniffer software on all seven systems. These seven sniffers compromised 30 computers at Rome Labs. All of these computer systems contained sensitive research and development data.