Ads by TechWords

See your link here
Receive the latest technology news and information.
Hardware
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
Cloud Computing
View all newsletters




Privacy Policy
 

Olympic IT security requires advance planning

Lessons learned in Salt Lake City in 2002 will come in handy in Athens

August 13, 2004 12:00 PM ET

IDG News Service - If there's one thing the Atos Origin SA team understands as lead contractor for the Olympic IT infrastructure, it's that you must learn from your mistakes.
One such lesson learned the hard way: IT security must be built in from the start, according to Claude Philipps, program director of major events at Atos Origin. For the 2002 Olympic Games in Salt Lake City, the company "started embedding the security too late, so it wasn't running well."
The lapse caused nothing serious, except for a few headaches. "We had a lot of attacks, but we ran the games safely," Philipps said.
During those games, the Atos Origin team found that the number of alarms generated by IT security systems could quickly become unmanageable without software help. With that in mind, Philipps expects to see 200,000 IT security alarms per day in Athens -- most of them irrelevant warnings -- and has software in place to help sort out the false alarms.
"This is not manageable," he said. "We want to reduce it to [the] 10 to 50 that are real."
Information security manager Yan Noblot explained how much goes into culling the false alarms from those that are real. To begin, he said he monitors traffic between the 10,500 or so workstations and 900 servers on the network.
"We start with the traffic in the venues and compare that with known traffic. This includes traffic at the operating system level," he said. "On top of that, we are receiving logs from all the routers and antivirus system."
This year, Atos Origin is using Computer Associates International Inc.'s eTrust to filter the alarms based on a set of rules developed by the team in Athens, Noblot said. "The amount of information generated every day is massive. You can't put all that on a screen. We have some business intelligence to extract what is really meaningful."
Careful filtering can help in other ways, too, particularly when it comes to Windows 2000 permissions. Noblot said the IT team will be using NetIQ Corp. for security administration.
"It allows us to have a more granular definition of rules," Noblot said. "We don't have to give admin rights to the help desk. We give them only the rights they need."
That precaution might rule out some social engineering attacks, but there are other ways in which the network can be vulnerable. In Salt Lake City, for example, would-be hackers got around application-level locks on public-access PCs by rebooting them and trying to get into the network


Reprinted with permission from

IDG.net
Story copyright 2009 International Data Group. All rights reserved.

Jump to comments

Security

Additional Resources

Xerox
By using solid ink technology only from Xerox, you could save up to 65% by printing color for the cost of black and white. Enter for a chance to WIN a PhaserTM 8860 network color printer!
Microsoft
Save time and mitigate security risk. Deploy it now.
Sybase
In this white paper, IDC analyzes the role of next-generation mobile enterprise platforms as organizations seek a more strategic deployment of mobile solutions.

Learn the important issues you must consider before starting your next mobility initiative. Get your mobility white paper from IDC now, compliments of Sybase.

White Papers & Webcasts

Faster, Cheaper and Easier to Maintain
Can you afford not to upgrade your servers to today's advanced, energy-efficient technologies?  

Do more with less thru Netcool?
Learn how IBM Tivoli® Netcool® solutions can help service providers streamline their operations, improve responsiveness and reduce costs.  

Effectively Implementing Datacenter Automation
Effectively select and deploy the best datacenter automation solution today!

IDC report: Profitability and OSS Support: A Return on Investment Analysis of IBM Tivoli Netcool
IDC studied 14 mobile and fixed-line service providers that implemented Tivoli® Netcool® and found that IBM Tivoli Netcool can help in big ways.  

Aligning IT to Business: The Rising Importance of Application Delivery Networks
Application Delivery Networking (ADN) will play a vital role in helping enterprises incorporate strategic technologies to achieve business initiatives.

IBM Systems Makeover Analysis for Oracle Environments
This brochure shows how the IBM Systems Makeover Analysis takes a look at your current Oracle hardware infrastructure, then proposes a high-level future...  

Lower your IT costs and risks: Get a server makeover
Find out how a server makeover analysis can help you develop a high-level roadmap for your infrastructure.  

Mitigate Risk, Lower Costs and Improve Network Efficiency
Create a stable IP network that not only meets today's challenges, but is flexible enough to also meet future demands.