Stellar University had a data breach due to lax security practices and siloed departments. A suspicious folder was found and deleted on a system, but a new folder was created and processor usage spiked, indicating a potential compromise. The system was disconnected from the network and security was notified. The breach exposed weaknesses like a short password policy and lack of training. The university analyzed the incident and strengthened security policies and account management going forward.

1.  Stellar University
 diverse urban university
 multitude of different technologies in use
 servers can be set up by any department or
individual
 everyone did not work together

2.  Several changes occurred prior to the breach
 management shift in focus
 department restructure
 financial difficulties

3.  Suspicious folder
 Upon deletion of initial folder
 new folder was created
 processor usage spiked
 multiple DOS windows opened in succession

4.  Disconnect the system from the network
 Notify security personnel
 Conduct a more in depth check of system to
determine scope and severity of compromise

5.  Password policy (6 characters)
 1 hour lockout after 5 failed attempts to logon
 All password change at next logon

6.  Post-hack exam was handled informally
 Summary write-up (management)
 Analysis of how to prevent in the future (system
administrators)
 Page or email notification
 Temporary password policy made permanent
 Invalid account identification

7.  Why didn’t the university implement any form of
training for its personnel?

8.  Dhillon, G. (2007). Principles of information
system security: Text and cases. Hoboken, NJ.
John Wiley and Sons, Inc.