Search FCW


Subscribe Now!
Table of Contents
Sprint
Business
BPM
CXOs
Columns
Columnists
Defense
E-Government
Elections 2008
Enterprise Architecture
Funding
Homeland Security
Health IT
IPv6
LOB
Management
Procurement
Privacy
Policy
Program Management
State and Local
Security
Technology
Telework
Training and Certification
Workforce

More Topics
resourcecenter
Home
Letters to the Editor
Current Issue/Download
Print/Online Archives
Editorial Calendar
researchstore
resourcecenter
Communications for Continuity Operations

Oracle Resource Center
NEW! Transforming Data Center
Managed Services
Service Oriented Architecture
Training & Simulation
Networking Communications
Security Directives and Compliance
Data Center Virtualization
Air Force ELSG Contract Guide

More >>



Latest News
ADVERTISEMENT





 

Sandia backhacker wins $4.3 million judgment against Sandia Labs

By Bob Brewin
Published on February 13, 2007

Comment

Click here to comment on this article


Related story links

DOD battles increasingly virulent cyberattacks


Newsletters

You might also be interested in these FCW newsletters:

Daily

To learn more, click here.


ALBUQUERQUE – Shawn Carpenter, who was fired by Sandia National Laboratories in January 2005 for conducting backhacking operations against intruders he discovered on Sandia networks, won a $4.3 million wrongful discharge suit against the labs today. Backhacking occurs when networks are attacked and someone on the hacked network responds with a counterhack or attack.

Carpenter, who worked in Sandia’s computer security operations organization, started detecting attacks against Sandia networks in 2002, according to court records in the 2nd District Court of New Mexico. Carpenter brought the attacks to the attention of Sandia and other government agencies, including the Army Research Laboratory and the FBI.

Carpenter’s attorney, Thad Guyer, said testimony during the trial, which started Feb. 5, showed that Carpenter detected computer attacks from China, Brazil, Italy and Romania against Sandia systems. Guyer declined to say whether the attacks from China were state-sponsored, adding that he believed the attacks from the other countries were done in support of terrorist organizations.

Despite Carpenter’s discovery of widespread hacking from abroad against Sandia networks, the lab decided to rein him in. This occurred, Carpenter alleged in the suit, despite the fact that he was cooperating with the FBI and the Army research lab in his backhacking investigation.

In January 2005, Sandia terminated Carpenter for insubordination and for using Sandia information outside the lab. Carpenter said in the suit that the insubordination charge arose because he refused to comply with Sandia directives that he not disclose information “relating to serious breaches of national security to anyone inside or outside Sandia,” such as the FBI or the Army research lab.

Guyer said the $4.3 million in punitive damages and $350,000 for psychological stress that Carpenter won in the suit proves that Carpenter did the right thing with his backhacking, which Sandia had alleged violated the law. A panel of 13 jurors heard the case.

Guyer said Carpenter’s persistence in pursuing attackers in cyberspace despite Sandia’s increasing resistance makes him a true U.S. hero and a patriot. He added that the Carpenter case resonates with FBI warnings issued before the September 2001 attacks about potential terrorist threats that were ignored.

Sandia was disappointed by the verdict and is considering an appeal, a spokesman said.


upcoming event

Green Computing Summit, Ronald Reagan Building, Washington, DC
December 2 - December 3, 2008

Trusted Internet Connection and the Comprehensive National Cyber Security Initiative, The Willard Intercontinental Hotel, Washington, DC
December 4, 2008


 

head
fcw
issue
First Name State
Last Name Zip
Title Email