Patches, Updates, Service Packs

1
Patches, Updates, Service Packs Security
Releases

• Cyber Security Month
• October 2006

2
Patches, Updates et. al cont

• What will we talk about today?
• Patches
• Updating
• Automatic
• Manual
• GU Policy
• Resources

3
Patches

• What is a patch?
• A patch is a fix to a program bug
• Its an actual piece of object code that is
  inserted into (patched into) a program
  
• Patches are typically available as downloads over
  the Internet

4
Patches con't

• AKA Patches
• Critical update
• Feature Pack
• Hot fix
• Security Patch
• Security update
• Service release
• Service pack
• Software update
• Update
• Update rollup
• Upgrade

5
Patches, cont

• Why patch?
• Another layer to keep your computer as secure as
  possible
  
• Help avoid data loss
• Reduces impact of new viruses, and other risks
  that exploit the vulnerabilities in your computer
  software
  
• Proactive security patching of all your software
  will help prevent viruses, trojans, malware,
  spyware and other malicious software from
  infecting your computer

6
Patches, cont

• How do I patch?
• For Windows users - use Microsoft Update
• MS Update will only update Windows if you have
  Windows 2000 or older
  
• If you have Windows XP, MS Update will patch your
  operation system and all of your MS software
  (Word, Outlook, Excel, etc.)
  
• For other common programs such as Adobe, Apple
  Quicktime, and RealPlayer, you must go to the
  manufacturer website to download the latest
  patches and upgrades
• Usually under Help
• MAC users use Software Update

7
Updating

• Two basic ways of updating your Windows operating
  system
  
• Automatic updates
• Click the Start button
• Select Control Panel
• Select System icon
• Click on the Automatic Updates tab
• Select your preferences

8
Updating, cont

• Tell it how to update
• Preference 1 Notify me before downloading any
  updates and notify me again before installing
  them on my computer
  
• Preference 2 Download the updates automatically
  and notify me when they are ready to be
  installed
  
• Preference 3 Automatically download the updates,
  and install them on the schedule that I specify

9
Updating, cont
10
Updating, cont

• Manual updates
• To do manual updates, you use Internet Explorer
• Select Tools
• Select Windows Update
• Or use the shortcut to Windows Update from the
  Start Programs menu

11
Updating cont

• MAC users
• Software updates configured by default
• Additional patches can be installed from
• http//www.apple.com/support/downloads

12
What Is GU Doing?

• Monthly vulnerability scanning
• Using 2 independent technologies
• Monthly patching of operating systems and
  software
  
• Patches are deployed each month to campus
  computers
  
• Behind the scenes
• Reboot forced at 1 AM

13
Emergency!

• On occasion it is necessary to force patching to
  occur outside of the regular patch schedule
  
• Why?
• Prevent a major virus outbreak
• Proactively eliminate a major vulnerability
• Repair damaged software

14
Emergency! cont

• How does IT do it?
• Warning! Warning! Warning!
• Procedure
• Everyone email/audix with subject of URGENT!
  CYBER SECURITY ALERT
  
• Email will include
• Details
• Time frames
• Actions user IT
• Warning may not be patch related

15
Emergency! con't

• Emergency patching will
• Always warn you prior to installation
• Give you at least 2 minutes to save work
• Give you at least 1 minute before forcing a
  reboot of your computer
  
• ALWAYS SAVE YOUR WORK IF YOU LEAVE YOUR DESK!
  (Windows CTRLS)
  
• Know who your patching authority is
• JONESJ
• FRANCIS
• NIELSEN

16
Emergency! con't
17
Emergency! con't
18
Policy

• View entire Vulnerability Scanning and
  Vulnerability Remediation policies at
  http//cybersecurity.gonzaga.edu
  
• Faculty, Staff, and students suspecting a
  malicious software infection should immediately
  contact the Help Desk by phone (x5550) or walk-in
  (AD028)

19
Policy, cont

• GU owned computers must be brought up to date
  before connecting to the administrative network
  
• Students must maintain their computers and keep
  them up to date with the latest patches
  
• Computers with security vulnerabilities that
  threaten the integrity or performance of the
  network may be denied access

20
Policy, con't

• Patches will be installed after hours whenever
  possible
  
• Log off of machines but do not power down
• Emergency patching may occur during production
  hours

21
Resources

• Windows Update
• www.update.microsoft.com
• Windows security scanner
• www.safety.live.com
• General security scanner/info
• http//insecure.org
• Symantec Security Scanner
• http//security.symantec.com/sscv6/
• Shields UP security scanner
• https//www.grc.com/x/ne.dll?bh0bkyd2

22
Contact Information

• Help Desk
• Extension 5550
• Jim Jones IT Asset Manager
• jonesj_at_its.gonzaga.edu
• Extension 5926
• Http//cybersecurity.gonzaga.edu