Skip to main content
Add as a preferred source on Google


Bloomington District Attacks Back with Plixer

  • By Dian Schaffhauser
  • 10/01/10

Bloomington Public Schools, District 87, has gone public with its February 2009 implementation of a set of network tools it's using to keep its network secure. The Illinois district deployed Plixer International's Scrutinizer NetFlow and sFlow Analyzer software to monitor its network traffic.

The tools are used for a number of monitoring activities at the 9,000 student district: to provide overall metrics for bandwidth use on its Cisco network, to identify traffic anomalies and Web usage not allowed by the school, and also to increase bandwidth for permitted sites.

But shortly after the installation, the software saved the day. A user contacted the IT department to complain about problems with a PC. The user's Web browser wasn't responding, and unrequested pop-ups were taking over the machine. A technician confirmed the computer was infected with the AV2009 virus, which hadn't been caught by the anti-virus software being used on the system. The virus was reaching out to botnet sites and sending e-mail to propagate itself. In a short time, the virus had infected more than 100 machines on the network.

Systems Administrator Jason Radford suggested trying out IT's new Scrutinizer NetFlow monitoring software. From a central console, the IT team created filters in Scrutinizer for SMTP and specific subnets trying to hit known botnet sites. In less than an hour, they isolated every infected machine and dispatched IT people to clean them up.

"Before enabling NetFlow and Scrutinizer, we had very little visibility," Radford said in a statement. "There is no question that it would have taken a lot longer to catch every infected computer without Scrutinizer."

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • abstract smartphone translucent screen displaying AI interface

    Apple Unveils Redesigned Siri AI

    At its recent Worldwide Developers Conference, Apple announced Siri AI, a redesigned version of its voice assistant that Apple describes in its own announcement as "a profoundly more capable and personal assistant." The update is intended to make Siri more conversational, more context-aware, and more useful across iPhone, iPad, Mac, Apple Watch, and Vision Pro.

  • AI artificial intelligence interface over laptop keyboard

    Microsoft Drafts AI Code of Conduct, Emphasizes Human Control

    Microsoft has published a draft code of conduct that lays out how its homegrown AI models should behave, with human control taking priority over model capability, autonomy, and even task completion.

  • Blurred silhouettes of business people in a modern office with a glowing blue network overlay

    Open Secure AI Alliance Moving Under Linux Foundation

    Governance of the Open Secure AI Alliance has moved to the Linux Foundation, giving the initiative what the organizations describe as a neutral home for developing open source tools, shared standards and defensive practices. The Alliance was launched by NVIDIA in July to develop open security technologies for AI systems and agents.

  • Neon email icon hangs from chain with fishing hook below.

    Report Emphasizes Importance of Building a Security Culture

    While security teams have invested heavily in e-mail protection, endpoint security, and identity controls, new research from Fortra suggests one challenge remains difficult to solve: users.