Installation of Security Policy into Kumamoto University and DNS based Detection of Security Incidents in the Campus Network

摘要

In Kumamoto University, we created policies and standards through August 2001 to February 2003, and procedures through March 2003 to March 2004 for the campus information security policy. Afterward, the information security policy was officially in­stalled into the university and it has been taken effect since September 2004. On the other hand, we can be keeping to detect efficiently the security incidents in the campus network system by only watching the domain name resolution traffic since 2004 and can easily take various incident responses. This is because the security policy had been already installed in 2004, we can easily implement the prototype detection system, we can get friendly support from the users of the campus network. We can report how to smoothly install a security policy into a national university corporation and how to use the security policy efficiently to take countermeasures to fix the security incidents in the campus network system.