Proof that no computer system is immune to a virus attack, the crew of the International Space Station is having to update its anti-virus software, after the fact.
...according to NASA, this wasn't the first infection.
"This is not the first time we have had a worm or a virus," NASA spokesman Kelly Humphries said. "It's not a frequent occurrence, but this isn't the first time."
NASA downplayed the news, calling the virus mainly a "nuisance" that was on non-critical space station laptops used for things like e-mail and nutritional experiments. NASA and its partners in the space station are now trying to figure out how the virus made it onboard and how to prevent that in the future, according to Humphries.
NASA's daily reports from the ISS have revealed that the W32.Gammima.AG worm has made its way aboard the Station's laptop computers - a fairly harmless worm used to gather information of people playing online games.
As they're 180 miles away from the nearest network, it's doubtful that the crew have been spending their time on WoW, but this has raised some serious questions about the security of ISS systems, such as: Why don't they already have even basic anti-virus software already installed?
According to the transcript released by NASA at a space operations meeting last week (ISS 30P SORR), they very briefly outline the situation and offer some explanation as to how the infection may have happened:
Special Topic on Virus detected onboard
- W32.Gammima.AG worm. This is a level 0 gaming virus intended to gather personal information.
- Virus was never a threat to any of the computers used for cmd and cntl and no adverse effect on ISS Ops.
- Theory is virus either in initial software load or possibly transferred from personal compact flash card.
- Working with Russians (and other partners) regarding ground procedures to protect flown equipment in the future.
- It was noted that most of the IP laptops and some of the payload laptops do NOT provide virus protection/detection software
Looking at the ISS Daily reports, we can track what action cosmonaut Sergey Volkov is taking to remedy the problem:
ISS On-Orbit Status 08/22/08
All ISS systems continue to function nominally, except those noted previously or below.
CDR Volkov began his day by downlinking yesterday’s Norton AntiVirus (NAV) data from the RSK-1 laptop scan. Later in the day, FE-2 Chamitoff also ran the scan on the SSC (Station Support Computer) to be used for downloading today’s 1553-bus comm files of the JEMRMS (Japanese Experiment Module/Robotic Manipulator System) Checkout #4 from the RLT (RMS Laptop Terminal) to the OpsLAN for downlinking. [All A31p laptops onboard are currently being loaded with latest NAV software and updated definition files for increased protection.]
ISS On-Orbit Status 08/21/08
Sergey checked another Russian laptop, today RSK-1, for software virus by scanning its hard drives and a photo disk with the Norton AntiVirus application.
(There's a part of me that's disappointed that NASA aren't using open-source software.)
Let's hope that NASA has now learnt its lesson.



Comments (0)