DDN Security Bulletin 90-07 DCA DDN Defense Communications System 9 Apr 90 Published by: DDN Security Coordination Center (SCC@NIC.DDN.MIL) (800) 235-3155 DEFENSE DATA NETWORK SECURITY BULLETIN The DDN SECURITY BULLETIN is distributed by the DDN SCC (Security Coordination Center) under DCA contract as a means of communicating information on network and host security exposures, fixes, & concerns to security & management personnel at DDN facilities. Back issues may be obtained via FTP (or Kermit) from NIC.DDN.MIL [192.67.67.20] using login="anonymous" and password="guest". The bulletin pathname is SCC:DDN-SECURITY-yy-nn (where "yy" is the year the bulletin is issued and "nn" is a bulletin number, e.g. SCC:DDN-SECURITY-90-01). ********************************************************************** FEDERAL INFORMATION PROCESSING STANDARDS AVAILABLE ONLINE Five Federal Information Processing Standards (FIPS) publications are available online at the Security Coordination Center (SCC). These documents address various aspects of computer and network security. FIPS 500-166 is a guide regarding managing the threat of computer viruses or intrustions. Also available are the executive, management, and user guides regarding methods to protect information resources. You can obtain these files on the NIC.DDN.MIL host [192.67.67.20] via anonymous FTP or Kermit. You can also get them via e-mail by sending a message to SERVICE@NIC.DDN.MIL with the subject line reading SEND SCC:FIPS_500_###.TXT (replace the ### with the number of the file you want and end with .PS instead of .TXT for the postscript version of FIPS 500-166). If you have questions about the procedures for obtaining copies of these files, please call 1-800-235-3155 or send a message to SCC@NIC.DDN.MIL. Below are the file names as they are online and the descriptive titles of the documents. Use the file name, rather than the document title, when requesting the file online. All files are in the "SCC:" directory. File Name Document Title FIPS_500_166.TXT............COMPUTER VIRUSES AND RELATED THREATS: A MANAGEMENT GUIDE (SEP-89) FIPS_500_166.PS.............COMPUTER VIRUSES AND RELATED THREATS: A MANAGEMENT GUIDE - POSTSCRIPT VERSION FIPS_500_169.TXT............EXECUTIVE GUIDE TO THE PROTECTION OF INFORMATION RESOURCES (OCT-89) FIPS_500_170.TXT............MANAGEMENT GUIDE TO THE PROTECTION OF INFORMATION RESOURCES (OCT-89) FIPS_500_171.TXT............COMPUTER USER'S GUIDE TO THE PROTECTION OF INFORMATION RESOURCES (OCT-89)