Contributed by Organizations or Campuses; Articles, Papers, and Reports; and Security Risk Assessment and Analysis

Why File Sharing Networks Are Dangerous

Added by the EDUCAUSE Librarian
Title:Why File Sharing Networks Are Dangerous (ID: CSD5127)
Author(s):Dan McGuire (Dartmouth College), M. Eric Johnson (Dartmouth College), and Nicholas D. Willey (Dartmouth College)
Source:Communications of the ACM
Origin:Contributed by Organizations or Campuses (09/10/2007)
Type:Articles, Papers, and Reports
Abstract:

In this paper the authors analyze P2P security issues, establishing vulnerabilities that software
clients represent. The authors go on to present experimental evidence of the risk through honeypot
experiments that expose both business and personal financial information and they track the resulting consequences. Their analysis and experimental results show the security risk of P2P file sharing networks.

View this resource:

Incident Response at UT Austin

Added by the EDUCAUSE Librarian
Title:Incident Response at UT Austin (ID: CSD4581)
Author(s):Mary Grush (Campus Technology)
Origin:Contributed by Organizations or Campuses (2006)
Type:Articles, Papers, and Reports
Abstract:An interview with VP for IT Dan Updegrove. The recent break-in to an administrative database at the McCombs School of Business at UT Austin (TX), discovered April 21, 2006, may have compromised the personal data of a very large number of individuals. Early reports stated there were about 197,000 records in the database. We caught up with VP for IT Dan Updegrove for an update and some of his impressions after the first two weeks of the institution's incident response.
View this resource:

Locking Down Departmental Data

Added by the EDUCAUSE Librarian
Title:Locking Down Departmental Data (ID: CSD4580)
Author(s):Doug Lederman
Origin:Contributed by Organizations or Campuses (2006)
Type:Articles, Papers, and Reports
Abstract:As hackers have found their way into computer networks around the country in recent years — putting individuals' personal information at risk of identity theft and embarrassing companies, colleges and other entities — many if not most higher education institutions have significantly tightened their technological security.
View this resource:

Open-source bugs undermine digital signatures

Added by the EDUCAUSE Librarian
Title:Open-source bugs undermine digital signatures (ID: CSD4554)
Author(s):Joris Evers (CNET News.com)
Origin:Contributed by Organizations or Campuses (2006)
Type:Articles, Papers, and Reports
Abstract:A pair of security bugs in cryptography software could allow an attacker to insert content into a digitally signed message or forge signatures on files.
View this resource:

Server hack at Georgetown University probed

Added by the EDUCAUSE Librarian
Title:Server hack at Georgetown University probed (ID: CSD4544)
Author(s):Jaikumar Vijayan (PC World)
Origin:Contributed by Organizations or Campuses (2006)
Type:Articles, Papers, and Reports
Abstract:Data on as many as 41,000 people may have been compromised.
View this resource:

Data Privacy: What We Can Learn From the Suits

Added by the EDUCAUSE Librarian
Title:Data Privacy: What We Can Learn From the Suits (ID: CSD4510)
Author(s):Joseph C. Panettieri (Campus Technology)
Origin:Contributed by Organizations or Campuses (2006)
Type:Articles, Papers, and Reports
Abstract:Savvy college and university administrators are engaging government and business experts to ensure data security and privacy on campus. Maybe they're on to something.
View this resource:

Signaling Vulnerabilities in Wiretapping Systems

Added by the EDUCAUSE Librarian
Title:Signaling Vulnerabilities in Wiretapping Systems (ID: CSD4299)
Author(s):Micah Sherr (University of Pennsylvania), Eric Cronin (University of Pennsylvania), Sandy Clark (University of Pennsylvania), and Matt Blaze (University of Pennsylvania)
Source:IEEE Security and Privacy
Origin:Contributed by Organizations or Campuses (2005)
Type:Articles, Papers, and Reports
Abstract:Telephone wiretap and dialed number recording systems are used by law enforcement and national security agencies to collect investigative intelligence and legal evidence. In this paper, we show that many of these systems are vulnerable to simple, unilateral countermeasures that allow wiretap targets to prevent their call audio from being recorded and/or cause false or inaccurate dialed digits and call activity to be logged. The countermeasures exploit the unprotected in-band signals passed between the telephone network and the collection system and are effective against many of the wiretapping technologies currently used by US law enforcement, including at least some "CALEA" systems. Possible remedies and workarounds are proposed, and the broader implications of the security properties of these systems are discussed.
View this resource:

Steps for Managing Risk

Added by the EDUCAUSE Librarian
Title:Steps for Managing Risk (ID: CSD4275)
Author(s):Samir Kapuria (Symantec Corporation)
Source:ComputerWorld, Inc.
Origin:Contributed by Organizations or Campuses (2005)
Type:Articles, Papers, and Reports
Abstract:The author discusses techonology risk management.
View this resource:

Emerging Cybersecurity Issues Threaten Federal Information Systems

Added by the EDUCAUSE Librarian
Title:Emerging Cybersecurity Issues Threaten Federal Information Systems (ID: CSD4119)
Origin:Contributed by Organizations or Campuses (2005)
Type:Articles, Papers, and Reports
Abstract:Federal agencies are facing a set of emerging cybersecurity threats that are the result of increasingly sophisticated methods of attack and the blending of once distinct types of attack into more complex and damaging forms. Examples of these threats include spam (unsolicited commercial e-mail), phishing (fraudulent messages to obtain personal or sensitive data), and spyware (software that monitors user activity without user knowledge or consent). To address these issues, GAO was asked to determine (1) the potential risks to federal systems from these emerging cybersecurity threats, (2) the federal agencies' perceptions of risk and their actions to mitigate them, (3) federal and private-sector actions to address the threats on a national level, and (4) governmentwide challenges to protecting federal systems from these threats.
View this resource: