NEWS RELEASE
Slammer Worm

One Month, Over a Million Internet-Based Attacks, And Not One Security Breach at Thomas College

Waterville, Maine --- February, 2003 – “The slammer worm that has cost businesses billions of dollars across the globe and continues to breach security systems worldwide, attacked small and big organizations with equal fury,” explained Thomas College Vice President for Information Technology (IT) Services Christopher Rhoda, developer of the first web-based computer administrative system to be used by a college or university in the United States. Thomas College was attacked mercilessly, yet its planning and precautions paid off.

“During the first three days of the slammer worm attacks, Thomas College saw 70,000 or more attempted attacks a day,” Rhoda revealed. “On the third day alone, by 9 a.m., we had received 105,000 attempted attacks from the slammer worm.”

Users at the Waterville campus did not notice these attacks, since computer systems continued to function normally. “On two occasions the firewall protection system was overburdened with the attacks,” Rhoda said. “There were a couple of times when our firewall was being attacked so hard that people going out to the internet would notice that response was slow. Our system did not let the slammer worm in, which is quite an accomplishment.”

With a web-based computer administrative system that is cutting edge, developed using Microsoft and Solutions IQ products, coupled with in-house talent, Thomas College has always placed a priority on offering students a high level of technology services. In a world filled with viruses, hackers, and other security threats, maintaining a computer network that must be running 24-hours-a-day, 7-days-a-week, serving administrative, classroom, residential, and other needs is challenging. The IT Service Department has been up to the challenge, often taking steps to protect assets before problems arise.

In August, a new “firewall” system was installed to stop most unwelcome programs, viruses, and attacks against the computer systems at Thomas. “The new internet security and acceleration server gives us the ability to fine tune our network, get reports about use and misuse, and monitor our internet front door,” explained Vice President for Information Technology Services Christopher Rhoda.

“We use this new server not only to protect us and our students, but also to maximize the amount of information we can send and receive with people.” Rhoda’s department now prioritizes bandwidth requests based upon the type of information being sent or received. Off campus web pages are now stored locally in a cache, memory on a Thomas server, which means that multiple requests for information from off-campus are now processed much faster. For those in the know about computer systems, the internet security steps taken on a daily basis at Thomas rival those pursued by large, sophisticated companies.

“On a typical day over 2,000 junk e-mail messages (SPAM), are blocked,” Rhoda explained. The features and security demands do not stop there. The system blocks dozens of viruses and various Internet attacks, such as external requests that are so frequent they block the internal system from system. This last threat is commonly known as a denial of service attack. “As the Internet gets more sophisticated, the need for security measures will increase dramatically,” Rhoda noted. “The steps we have taken have so far proven effective. We will continue to work on our system to ensure ongoing, quality service for all.”