A nationwide hacker attack on computers running Windows 95 and Windows NT operating systems struck computers on the Cornell campus last week. Andrea Beesing, manager of the university's Network Operations Center, estimated that several hundred computers were affected.
"These attacks will crash the machine, either with an error message or a blank screen," Beesing said in a bulletin to campus network administrators. "The immediate solution is to re-boot the system."
The most widespread attack occurred between 8:30 and 10 p.m. Monday, March 2, Beesing said.
According to Tom Young, an assistant director in Academic Technology Services who is responsible for desktop systems, the campus community was largely unaware of the attack. Most users probably thought they had experienced an ordinary crash, he said, and a number of people called to ask if there had been a power glitch on campus.
Nevertheless, Young emphasized, the university regards the event "as abusive and a threat to university resources."
"These attacks are obviously very time-consuming and disrupt the ability of students and faculty to get their work done," said Peter Siegel, director of Network and Computing Systems for Cornell Information Technologies, "but we have already identified the fixes and encourage the campus to apply them as soon as possible."
The attacks are of a type known as "denial of service," meaning that they make the computer unusable, rather than changing or destroying data.
Because the tools are widely available to hackers, such attacks can be expected to continue, computer security experts say. However simple patches -- or corrections -- are available that will make computers using the Windows 95 and NT operating systems immune to this and several other types of attack. Cornell Information Technologies has constructed a web site with general information on forms of attack on Windows systems and preventive measures at http://www.cit.cornell.edu/security/windows/index.html.
| Cornell Chronicle Front Page | | Table of Contents | | Cornell News Service Home Page |