1. Northwestern University Information Technology UNITS meeting February 17, 2005 Network Security – Statistics and Trends Roger Safian r-safian@northwestern.edu

2. Northwestern University Information Technology Agenda Statistics Why these incidents occur Questions

3. Northwestern University Information Technology Statistics FY 2002/2003 –Virus = 1166 –Compromised = 727 –Total incidents = 3042 9/1/02 – 8/31/03 FY 2003/2004 –Virus = 7976 –Compromised = 467 –Total incidents = 9264 9/1/03 – 8/31/04

4. Northwestern University Information Technology Statistics (2) Q1 2003/2004 –Virus = 497 –Compromised = 150 –Total incidents = 890 9/1/03 – 11/30/03 Q1 2004/2005 –Virus = * –Compromised = 1783 –Total incidents = 1973 9/1/04 – 11/30/04

5. Northwestern University Information Technology Why these incidents occur? Weak Passwords –All machines and accounts need passwords –Use rules similar to the NetID rules –Longer is better…get creative. Updates not applied –Ensure Windows update runs automatically –Don’t forget about layered products

6. Northwestern University Information Technology Questions? Contact Information –1-847-491-4058 –1-847-467-6662 (NOC 24x7) –security@northwestern.edusecurity@northwestern.edu –r-safian@northwestern.edur-safian@northwestern.edu