State Computers Systems completely shut down in Arkansas....

4/16/2004 | Me

[TheBattman]

I hadn’t heard anything via the news today, but the DIS (Department of Information Services) the department responsible for upkeep of the state’s computer systems (Government, Schools, etc.) instructed all schools statewide that all computers, including workstations, servers, etc. MUST be shut down at the end of the school day today (Friday 4/16/2004). This is to apply to ALL computers tied in with the state network.

The reason? An unmanageable number of viruses and an attack by hackers (probably allowed in via the email worms infecting the system).

The network is suppose to be completely down through 8:00 AM Monday morning.

Locally, our technology folks are having to change all passwords on EVERY workstation on campus because of one of these hacker attacks that supposedly compromised passwords campus-wide.

[TheBattman]

I just can't understand why this has gotten so out of hand. The state's internet access was completely down Monday due to massive traffice generated by these same email worms.

Exactly how can you get idiots to quit opening these infected emails? My suggestion (and the suggestion of the Asst. Principal at the high school) is to take the computer away from anyone who consistantly gets infected. IF their job is based around using the computer - fire them. The cost to the state of Arkansas has grown to a truly scarry number -

Keep in mind that this shut down applies to 100% of the state's network - I'm not sure if it applies to law enforcement or not....????

[Brett66]

I work for the State of Oklahoma and they route any email with attachments through postini.

[taxcontrol]

How to fix

1) install all computers with a current anti-virus package and clean all systems. If the system can't be cleaned, reinstall.
2) protect your email server with an anti-viurs package
3) guard your email server with a pre-filter (ironmail)
4) install all computers with a desktop firewall software (recommend Cisco's CSA product)
5) proxy all Internet access through a central host to log access and block unacceptable sites.
6) train teachers to not allow students on the computers
7) train teachers to not bring in software from home
8) train teachers to not open email unless they know where it came from and the contents BEFORE they open the files.

[Arkinsaw]

How to fix

Yes, but can you do all that for under $50.00? If not, the State of Arkansas would prefer just to take its chances.

[taxcontrol]

Well, for $50 per computer - maybe.

[al baby]

hillarys just cleaning house down there when kerry gets dead so she can run in 04

[TheBattman]

Most of those suggestions have been implemented at our location.....

#8 is the #1 reason for the problem. And it's the same teachers every time - they open every single email that hits their computer - and bang.

Add to that they they refuse to follow directions to update the AV software (AVG) regularly.

[LasVegasMac]

6) train teachers to not allow students on the computers 7) train teachers to not bring in software from home 8) train teachers to not open email unless they know where it came from and the contents BEFORE they open the files.

We take the approach of not relying too much on the user. Train them ? I don't know about that. Educate, maybe. One big plus for us is that you cannot bring software into the building.

Good point on #3, we are actively looking at that solution to take some load off the mail server.

You don't mention DMZ's and intrusion detection protection - all "layers" in the scheme.

LVM

[LasVegasMac]

One of them thar southern virus critters?

LVM

[smokinleroy]

State Computers Systems completely shut down in Arkansas....

Photo of Arkansas State Computer system:

[smokinleroy]

Maybe this is more like it:

[razorback-bert]

Any update?

[DeaconBenjamin]

DFA computers were not shut down today, nor did they lack internet access on Monday. FWIW.

[taxcontrol]

I didn't think going into a full description on how to protect a network would do much good -- besides, that is what I do for IBM's customers.

[taxcontrol]

If you have some control of or input to the situation, you may want to open a more private discussion. There is software that will allow you to check a workstation for the latest virus configuration file BEFORE they are allowed on the network.

It also protects against "day zero" viruses by being behavior based, not signature based. I just did a bake off between the three leading vendors in this space.

[taxcontrol]

If you have some control of or input to the situation, you may want to open a more private discussion. There is software that will allow you to check a workstation for the latest virus configuration file BEFORE they are allowed on the network.

It also protects against "day zero" viruses by being behavior based, not signature based. I just did a bake off between the three leading vendors in this space.

[Hank Rearden]

Arkansas has electricity?

[MARTIAL MONK]

An Arkansas computer is ten fingers and twelve toes.

[taxcontrol]

Check out http://www.ciphertrust.com/ironmail/

I know of a large international bank that uses their product. Works well for them (8,000+ users) and while no anti-virus is perfect, the have been able to dodge the most recent virus attacks and remain email virus free.

[taxcontrol]

Check out http://www.ciphertrust.com/ironmail/

I know of a large international bank that uses their product. Works well for them (8,000+ users) and while no anti-virus is perfect, the have been able to dodge the most recent virus attacks and remain email virus free.