1. Campus Technology Day Campus Security Review September 25, 2003

3. Looking at the Network Sean Atkinson

4. Attacks in the Last 24 Hours DOS Cisco attempt 6 DOS MSDTC attempt 74 SCAN FIN 79 WEB-IIS cmd.exe access 82 WEB-IIS ISAPI . ida attempt 99 Known Attacker - SCAN nmap TCP Ping 142 WEB-IIS WEBDAV nessus safe scan attempt 214 SCAN nmap TCP 227 SCAN FIN 315 WEB-MISC apache DOS attempt 353 Attack Type # of Attempts

5. Attacks in the Last 7 Days DOS Cisco attempt 33 WEB-IIS CodeRed v2 root.exe access 64 DOS MSDTC attempt 67 WEB-IIS ISAPI . ida attempt 633 WEB-IIS cmd.exe access 707 Known Attacker - SCAN nmap TCP Ping 887 SCAN FIN 1048 SCAN nmap TCP 1056 WEB-MISC apache DOS attempt 1878 DOS MSDTC attempt 2369 WEB-MISC http directory traversal 7359 SCAN FIN 7575 DDOS shaft synflood 19885 Attack Type # of Attempts

6. Attacks in the Last 24 Days DOS Cisco attempt 49 WEB-IIS CodeRed v2 root.exe access 109 DOS MSDTC attempt 159 WEB-IIS ISAPI . ida attempt 1152 Known Attacker - SCAN nmap TCP Ping 1553 WEB-IIS cmd.exe access 2005 SCAN FIN 2388 SCAN FIN 10561 DDOS shaft synflood 19885 DOS MSDTC attempt 34757 Attack Type # of Attempts

7. What's attacking us today?

8. Network Security Requirements Dick Bednar

12. Notification Processes & Domain Review Mike Marcinkevicz

18. No Domain Policies ACAD Domain Services - Existing Dept Purchase Dept Support Manual Updates McAfee EPO Available Dept. Software Update Depts. Division/Dept Labs Dept Support/Admin Manual Updates McAfee EPO Available Dept. Software Update Labs All Servers IT or Dept. Support Manual Updates McAfee EPO Available Dept. Software Update Servers

19. Domain Policies for Passwords Domain Updates for critical patches ACAD Domain Services – New 10/03 Dept Purchased Help Desk Support GPO Critical Patches Update Expert Updates McAfee EPO Installed Dept. Software Apps Campus Division/Dept Labs Dept Support/Admin Update Expert Updates McAfee EPO Available Dept. Software Apps Local All Servers IT or Dept. Support Manual Updates McAfee EPO Available Dept. Software Apps Servers

21. OTHER Domain Services Local Purchase & Support Password Requirements Admin Contact Technical Contact IT Admin Access McAfee EPO Available Update Expert Available Dept. Software Apps OTHER

23. QUESTIONS ??