Protecting the Beijing Olympics from hackers

By Nick Heath, Special to ZDNet Asia
Friday, October 31, 2008 10:59 AM

The security team behind the Beijing 2008 Olympic Games has revealed how it found the real risks hidden within the millions of alerts it receives every day.

Faced with 12 million alerts per day the team at the Games' worldwide IT partner Atos Origin used in-house risk management technology to reduce this to just 90 critical alarms, focusing on the most serious risk.

Honey traps were also used to trap several hackers, using results terminals with security holes to lure criminals into attempting to install applications.

At the RSA Conference 2008 in London, Vladan Todorovic, information security manager for the Beijing 2008 Olympic Games, described how the team coped with the alarms triggered on more than 12,000 devices spread over 70 venues, thousands of kilometers apart.

Todorovic said: "We were using real time risk management technology developed at previous games including Athens and Salt Lake.

"We were capable of detecting both the aggressive and slower attacks and prioritizing them accordingly.

"As you know we managed it so there was no effect on the running of the Games."

The team expects to face new challenges from more wireless public networks at the London 2012 Games and also hopes to perfect new authentication technologies that were not ready for use in the Beijing Games.

The most frequent security events over the course of the Beijing Games related to port security, unauthorized access attempts and bad configurations, with the overall number of security calls rising to their highest level on the seventh day of the event.

The Atos Origin system used multiple servers to correlate unexpected incidents on the system to spot both fast and staggered attempts to hack the network.

Remaining alarms were then prioritized based on risk, for example if it was on a system at a venue where an event was taking place or on a key system.

Automated real-time security audits also allowed Atos Origin to examine every new or reconfigured device connected to the Games' system to check the device had the proper security settings and antivirus software installed.

Nick Heath of Silicon.com reported from London.


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

10 open source projects worth checking out

Open Source

The open source field is pretty crowded, but certain projects stand above the rest. Here are 10 tools and solutions you don't want to overlook.


Read more »



Do we need more delivery centers?

Blog thumbnail

As I wrote a while back in about "racing to subsidies", there certainly is an increased focus by governments to attract delivery centers to their region. To do that, many..... by Michael Rehkopf

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web