March 2009 Archives

So we sit on the brink of yet another malicious attack - the Conficker Worm - and wait patiently to see what evil it will unleash.  Most of the online and print media have been sounding the alarm for at least the past week.  Most have been reporting the facts as they are known, while others are sensationalizing the event in much the same way the Michelangelo virus was (for those that can remember back that far).  While I do not mean to trivialize the potential impact of this malicious code, I never cease to be amazed at how attacks such as this still manage to negatively impact business and government systems in this day and age.

The Conflicker Worm is avoidable by insuring that Microsoft patch MS08-067 is installed (MS08-067 was part of Security Update KB958644, which was published by Microsoft in October 2008), and that anti virus signatures are current.  While I certainly hope that I am wrong, I expect that we will read of organizations that will incur significant loses due to the effects of this virus.  Implementation of some basic best practices such as automatic virus scans on a regular basis, keeping current on OS security patches and virus definitions, and not allowing any external device (such as USB memory) to be used in a machine without first scanning the files will prevent a good majority of the problems that these viruses can cause.  In organizations such as mine it allows our security administrators to focus their attention fighting the never ending battle against those from around the world who try desperately to infiltrate our network in the hopes that we have some sort of window into some of the prized federal systems.  

There is nothing more important in any computing environment than having good security plans and practices that are followed diligently.  Any IT organization that is adversely impacted by a minor event such as this (and again I hope that this is nothing more than minor in its impact and effect) should seriously consider the value that it provides and whether its users would be better served by another provider.

The master of suspense Alfred Hitchcock knew that suspense is generated when the audience can see danger that the characters on screen are not aware of. He said, "There's no terror in the bang of the gun, only the anticipation of it."

There has been much anticipation over the last few months on when the "gun" that is the American Recovery and Reinvestment Act of 2009 would be "fired" or passed by congress and signed by the President, and what funding would be included.  Included in the Act is $7.2 Billion dollars for Broadband investment referred to as the "Broadband Technology Opportunities Program" or "BTOPs".  These funds will be distributed through the National Telecommunications and Information Administration (NTIA) within the Department of Commerce and the Rural Utilities Service (RUS) within the United States Department of Agriculture.  

There are still many unknowns regarding who is eligible for these funds.  For example the key terms "unserved" and "underserved" must be defined in order to establish eligibility, and although it appears that local governments, schools, etc. are the main focus of these funds, states and big incumbents could end up having a large role and say in how these funds are used.  Some of what of the knowns are that these grants will require a match of some sort (in most cases), and O & M costs for out years will need to be budgeted and funded.  

So where to from here?  Based upon some presentations I have participated in and reading on this matter, the following are all recommended:

Ensure that all proposed projects meet the criteria outlined in the BTOPS.  The broadband bill can be read here
Be proactive in partnering with state and private entities if necessary.  
Enlist the support of all levels of elected officials.  
Be proactive in helping NTIA and RUS define the terms of the program.  On March 2nd the NTIA started meeting with interested parties and on March 10th there will be a public joint meeting with the NTIA, RUS, and FCC on the broadband initiative of the stimulus.  This meeting will be web cast live - go here for more details.

Although the gun has been fired there is still the suspense of another yet to be fired.