Tuesday, February 10, 2009

Get out of jail, free

The Houston Chronicle has an article about technology at the Houston Municipal Court system. The court's computer network has been hit, hard, by a virus - the report suggests Conficker but the chief technical director for the City doesn't think so. The effects include a shutdown of the muni court on Friday, and a suspension for arrests for Class C misdemeanors.

To me it seems clear there are a number of lessons to learn:

  1. Keep your critical computers away from the Internet. There are computers which are necessary for your department to function, and then there are the computers people use for less critical purposes. Think strongly about keeping an "air gap" between your critical infrastructure and the Internet.
  2. Avoid an operating system monoculture. Another hard thing to do - it's a trade-off between being easy to manage (the Southwest Airlines approach) and being robust. Having even 20% of your computers running something other than Windows can mean the difference between an inconvenient virus attack, and shutting down your courts for the weekend.
  3. Migrate off Microsoft Windows. It's a bug-ridden virus magnet.The sooner you move away from MS Windows on your critical infrastructure machines, the sooner you become more resistant to viruses and worms.

0 comments:

Post a Comment