Back to Search Start Over

HOW U.S. AND CANADIAN UNIVERSITIES AND COLLEGES DEALT WITH MALWARE AND RANSOMWARE ATTACKS IN 2016-2017.

Authors :
Schell, Bernadette
Passi, Kalpdrum
Roy, Luc
Source :
Journal of Information System Security; 2019, Vol. 15 Issue 2, p117-158, 42p
Publication Year :
2019

Abstract

In February 2016, Hollywood Presbyterian Medical Center's network was brought to a standstill for over a week as the hospital IT team worked diligently to recover from a ransomware attack. During the attack, hospital administrators declared an internal state of emergency as medical staff struggled--without success--to access patient records and critical computer systems critical to maintain adequate patient care. Because of these issues, some patients were transported to other functioning hospitals. The affected hospital's computer systems were literally held hostage until a ransom of 40 Bitcoins--approximately $17.00 --was paid. Only then could the targeted hospital regain control and its files--encrypted by malware. Since this 2016 incident, at least three more healthcare organizations in the United States publicly reported operational disruptions due to crippling ransomware attacks. (LogRythm 2017). Add to the ransomware attack mix small, medium, and large businesses, government offices, educational post-secondary institutions, and financial institutions during this time period and it becomes understandable why the Institute of Critical Infrastructure Technology dubbed 2016 "the year ransomware will hold America hostage." (LogRhythm 2017). To date, no study has reported how U.S. and Canadian universities have fared in the war against ransomware and vicious malware attacks during this period. This paper attempts to fill this void by providing descriptive statistics from online survey results delineating how a self-selected group of US and Canadian universities/colleges were affected by malware attacks on their networks in the 2017 academic year, and how satisfied the IT security experts at these institutions were with their capability to prevent, detect, contain, and recover from such attacks. Their views were compared with those reported by their industrial sector counterparts in previous years. [ABSTRACT FROM AUTHOR]

Details

Language :
English
ISSN :
15510123
Volume :
15
Issue :
2
Database :
Supplemental Index
Journal :
Journal of Information System Security
Publication Type :
Academic Journal
Accession number :
142016810