Advanced Virus Protection: A Strategic Blueprint to Repel the Next

Attack

Presented by Paul Schmehl

Information Security OfficerUniversity of Texas at Dallas

Why Virus Outbreaks Occur

We’re unaware• Virus Alert Lists• Notification Services• Security Discussion Lists

Why Virus Outbreaks Occur, IIWe’re unprepared• No plan in place• No procedures defined• No protection in place

How To Design Policies That Work

Define the problemDefine the policy’s purposeDefine the policy’s scopeDefine the policy’s limitationsDefine the policy’s enforcement

The Do’s and Don’tsOf Awareness Training

Do include everyoneDo establish credibilityDo be consistentDon’t assume user knowledgeDon’t cry wolf

How To Identify Your WeaknessesPay attention to the obviousLeverage your experiencesLearn from the mistakes of othersMine gold from your vendorsTurn lemons into lemonade

Effective Protective Measures

Cover every desktop, no exceptionsDon’t forget your serversLock the doors and keep them outDon’t let the buggers outLocalize the problems

Effective Detective Measures

Reverse intrusion detectionHoneypotsGet specificUse the tools you haveLeverage your existing products

Designing An EffectiveResponse System

Multiple monitoring methodsDefine the response rolesMake your decisions beforehandDon’t overreact to the crisisAlways debrief

Putting It All Together

Design sound policiesPreach security awarenessIdentify the weaknessesDevelop effective countermeasuresRespond proportionately

Thank you.

Questions, comments?