I wrote an article about computer security for our organization's newsletter. Enjoy.
xxxx is attacked every day. Hackers, viruses, and worms are constantly trying to find ways into our network. Some hackers are driven by the desire to access our confidential data, others want the notoriety that comes from having hacked into the Department of Defense. They will make several attempts each day, using programs found on the Internet to scan our networks and servers for security vulnerabilities. These attacks against xxxx most frequently originate in [deleted]. When someone attempts to break into our network [deleted].
In addition to human attackers, computer programs known as viruses and worms are crossing the Internet looking for holes in our systems. Viruses attach themselves to other programs, which are then transferred into our network via email, Internet downloads, chat programs, floppy disks, or CDs. Once a user accidentally runs an infected program the virus will attach itself to other programs, replicating exponentially. Whereas viruses spread by attaching to files, worms spread by traversing networks. A worm will connect to thousands of computers looking for security holes. Once the worm gains access to a computer through a hole it will replicate on its own and begin scanning for other vulnerable systems.
In order to protect against these attacks, xxxx employs multilayered defenses. Contrary to popular belief, firewalls alone are not the only thing needed to secure a network. Our first layer of defense consists of policies which outline how every xxxx employee can help prevent security breaches. These can be found under the Systems IT Policy section of Iweb. The next layer is our virus scanning software, automatically detecting and deleting viruses, worms, and other nefarious code from every xxxx computer. Firewalls are our next line of defense, regulating who is allowed in and out of our networks. We also [deleted]. Of course all of these would be useless without physical security, which prevents hackers and other ne'er-do-wells from walking into the building and subverting all of our other security measures.
Everyone plays an important role in protecting xxxx's security every day. For example, you should not write your password down or tell anyone what it is. If anyone asks for your password or has other suspicious questions, report it to the DISSG immediately. Never open emails with strange subject lines or from people you don't recognize, as they could contain viruses. If you notice suspicious activity in or around xxxx, immediately report it to Security. More information can be found in the Annual Security Awareness Training presentation. Take a few minutes to review the training; following the policies it outlines can help ensure xxxx's critical data stays out of the wrong hands.