Sometimes, the best indication that something is working well is that not much happens, like when you are inoculated against a disease – and then don’t’ get sick. That’s the type of approach the Lab's Computer Protection Program takes when it comes to protecting Lab computers from external viruses. A key part of this approach is regular checkups – the Computer Protection Program scans Windows systems on the Lab network to search for vulnerabilities. When susceptible systems are identified, the users are instructed to install the appropriate patches or lose their network access.

When the new Sasser worm spread quickly across the Internet earlier this month, the Lab’s proactive, preventative measures spared LBNL computers from a major virus outbreak. The Sasser worm exploits a vulnerability in Windows systems that allows a person or malicious program to run unauthorized code on victim systems, enabling them to take control of the system and then attack other systems. But because this vulnerability had been identified and scanned for, only one Lab system is currently known to have become infected by the worm.

While the proactive response of the Computer Protection Program prevented major disruption and cost to the Lab, numerous organizations around the world, including banks, universities and a national railroad, suffered massive Sasser infections. These infections brought computing activity to a halt and required considerable effort and cost to restore infected systems.

Lab computer users can keep their systems safe by updating their anti-virus software on a daily basis and installing security patches as needed.