8. Security Services (SLA J8) [more information]The primary efforts of JANET CSIRT for this quarter have been in attempting to combat the Conficker worm and its effects. The Conficker worm is still very prevalent across the community due mainly to re-infections as well as first-time infections of a system. Unfortunately, from CSIRT's perspective the worm does not currently have a damaging payload and as far as the infected system is concerned, to date it has done nothing malicious. Therefore the perception is that it is benign and, while irritating, not damaging, so it can be ignored or at least left until later to be sorted out. CSIRT is dealing with many hundreds of infections across the community each week which if not challenged with more effort within the community have the potential to cause serious amounts of damage to JANET. CSIRT continues to tackle recurring events across JANET: phishing attempts, general scanning for vulnerabilities and compromised systems due to poor password policy or enforcement. |