Objective: Examine the Stuxnet worm.

Description: The Stuxnet worm damaged physical equipment at the Iranian nuclear facilities it infected. As a security professional, you should be aware of past attacks, because history often repeats itself.

1. Start your Web browser, if necessary, and go to www.google.com.

2. Type Stuxnet Dossier in the text box and click Google Search.

3. What vulnerability did the worm use to propagate itself?

4. Did the worm seem to target specific countries?

5. Did the worm target specific systems? If so, how?

6. Leave your Web browser open for the next activity.

Activity 3-5 Researching Software Vulnerabilities (8 Points)

Objective: Examine some vulnerabilities released by the U.S. Computer Emergency Readiness Team (US-CERT).

Description: As a security professional conducting a security test on a customers network, you need to investigate any vulnerabilities that might be exploited. After discovering vulnerabilities that might affect a clients network, you must create documentation of your findings and make recommendations to correct the problem. In this activity, you examine vulnerabilities reported by US-CERT and learn what solutions or recommendations you might give to customers.

1. Start your Web browser, if necessary, and go to www.us-cert.gov/ncas.

2. Click the Bulletins link, then click the most recent bulletin.

3. Investigate the first few vulnerabilities. Pick one and use the links under the Source and Patch Info column to answer the following questions:

What recommendations would you give to someone whose system had been exploited because of this vulnerability?

Can anything be done to prevent exploitation of this vulnerability?