Sun, Jul 05, 2009

Most Recent Tucson Traffic Incidents

No incidents to display
updated every 5 minutes - incidents provided by transview.org

Hourly Update

UA computer systems vulnerable to attack, report says

State auditor general says her staff was able to access sensitive information in UA, ASU and NAU systems
By Howard Fischer
Capitol Media Services
Tucson, Arizona | Published: 06.20.2008
PHOENIX -- The computer systems at all three state universities are vulnerable to online attacks and hacking, the Auditor General's Office has concluded.
In a report released Friday, Auditor General Debbie Davenport said her staff was able to access sensitive information in university computers through the World Wide Web by exploiting weaknesses in their security systems.
Davenport said auditors selected 35 of 205 significant web-based systems for testing. All of those applications, she said, had "commonly found security weaknesses.''
From that list, auditors checked six to find out exactly what someone with unauthorized access could do.
In one case, Davenport said, her staffers were able to obtain more than 10,000 records which included names and Social Security numbers. They also accessed other records with student and employee identification numbers, addresses, phone numbers and e-mail addresses.
"These flaws could also be used to modify and delete data in the databases,'' Davenport reported.
In two other cases, she said auditors were able to access "high-level accounts'' where someone could not just view but also change sensitive student and employee information.
In written responses, the presidents of all three universities said they agreed with the findings in Davenport's report and have implemented or are working to implement changes.
∫ Read more in Saturday's Arizona Daily Star