Advanced Virus Protection: A Strategic Blueprint to Repel the Next Attack Presented by Paul Schmehl Information Security Officer University of Texas at Dallas

Why Virus Outbreaks Occur We’re unaware Virus Alert Lists Notification Services Security Discussion Lists

Why Virus Outbreaks Occur, II We’re unprepared No plan in place No procedures defined No protection in place

How To Design Policies That Work Define the problem Define the policy’s purpose Define the policy’s scope Define the policy’s limitations Define the policy’s enforcement

The Do’s and Don’ts Of Awareness Training Do include everyone Do establish credibility Do be consistent Don’t assume user knowledge Don’t cry wolf

How To Identify Your Weaknesses Pay attention to the obvious Leverage your experiences Learn from the mistakes of others Mine gold from your vendors Turn lemons into lemonade

Effective Protective Measures Cover every desktop, no exceptions Don’t forget your servers Lock the doors and keep them out Don’t let the buggers out Localize the problems

Effective Detective Measures Reverse intrusion detection Honeypots Get specific Use the tools you have Leverage your existing products

Designing An Effective Response System Multiple monitoring methods Define the response roles Make your decisions beforehand Don’t overreact to the crisis Always debrief

Putting It All Together Design sound policies Preach security awareness Identify the weaknesses Develop effective countermeasures Respond proportionately

Thank you. Questions, comments?