Automating windows security: building a security CD

ABSTRACT

The last two years have seen more virus and spyware activity on Windows computers than the preceding fifteen years. Blaster and Welchia wreaked havoc in the fall of 2003 because most of us had never seen a computer be infected through simple connection to the Internet. While an individual computer support person has the knowledge to disinfect a computer, the automation of that process is critical to handling thousands of users with limited support staff. Our CD method allows us to update, patch, and scan machines that are no longer able to connect to the network.This paper and presentation will focus on the methods the University Of Oregon (UO) has used successfully to automate patches, updates, and scanning which leverage conventional free and site-licensed tools.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

General Terms:
Management, Security

Keywords:
automated security, custom CD-ROM, patch management, scripting