Mitigation and Summary

• Avoidable in nearly all cases

• Patch machines

• User education

• Default deny firewall

• Centralised anti-virus on e-mail servers

http://www.ja.net/CERT/JANET-CERT/prevention/antivirus.html

• Organised patch process