90 likes | 190 Views
Incident Count 1995-Current. 1995. 1996. 1997. 1998. Incident Breakdown: February 1999. Total Incidents: 223 UCE (Ads, MLM, Pyramid, Fraud): 137 Chain Letters: 1 Abuse/Harassment: 2 Misuse of University Resources: 9 Account Compromise (actual/attempted): 5/5
E N D
Incident Count 1995-Current 1995 1996 1997 1998
Incident Breakdown:February 1999 • Total Incidents: 223 • UCE (Ads, MLM, Pyramid, Fraud): 137 • Chain Letters: 1 • Abuse/Harassment: 2 • Misuse of University Resources: 9 • Account Compromise (actual/attempted): 5/5 • System Compromise (actual/attempted): 18/57 • Denial of Service Attacks: 2 • Security Advisories: 10 • Suspected Honor Code Violations: 0
Staffing • Added second full-time person 8 months ago • More time for education and policy creation
Key Issues • IT staff policy • Security software • Good password practices • Kerberized email access • Virus protection • Security patches • Password changing
Key Issues • Turning off unencrypted access • remote access is a problem • sufficient tools for flexibility • SSH • Kerberos wrapped email access • Departmental systems • multiple break-ins to the same systems • publish best practices
Challenges • Education, education, education • security month • presentations • insecure login message • best practices for desktops and servers • Security breach procedures • Conversion to K5