Logs are always generated. Systems administrators regularly review the logs. System administrators watch for probes, and, when one is detected, they immediately respond. System and service software is continually upgraded. Critical systems are backed up.
Systems administrators filter for well-known vulnerabilities at the router.
To balance the sometimes competing needs for security and flexibility, the department supports two networks. The first, a Unix-based production network, is strictly controlled and closely watched. The second, the research network, also has many protections in place, but was developed primarily to provide a readily available means to share information and ideas and to allow greater flexibility in platforms, hardware, and software. Users of both networks are encouraged to back up their important files, but research network users must assume more responsibility. Patti and her staff have done an excellent job.