EDUCAUSE | Documents Contributed by ECAR and Network Security and Applications

Securing “Web 2.0” Technologies

drupal — Thu, 03 May 2007 12:54:18 -0500

Web 2.0 applications, especially client-side processing, Extensible Markup Language (XML) syndication, mashups and shared content, and social networking, bring unique vulnerabilities to our institutional environments. This Burton study clarifies the attack objectives and techniques that must be specifically defended against as risks increase, as well as the role of application security in the risk management process.

Links to documents within this file might require secure access to restricted Web sites.

Burton Group (www.burtongroup.com) provides technically in-depth research and advisory services for colleges and universities, government agencies, and commercial enterprises. Burton Group's practical and unbiased research and advice helps technologists make smart IT infrastructure decisions in increasingly complex environments. Burton Group covers directories, identity management, application platforms, architecture, and network and telecom infrastructure topics. Like ECAR, Burton Group is an unbiased advocate for the user and more than 80% of Burton Group's clients are user organizations rather than suppliers. EDUCAUSE member institutions can become users of Burton Group research services through EDUCAUSE pricing. Burton Group is an ECAR partner and can be contacted by email at slesueur@burtongroup.com or by telephone (801-373-5767).

Most Improved: How Four Institutions Developed Successful IT Security Programs

drupal — Fri, 03 Nov 2006 11:09:50 -0600

Researchers conducted this in-depth case study to complement the ECAR study, Safeguarding the Tower: IT Security in Higher Education 2006. The case study examines how four higher education institutions improved their information technology security programs since 2003—what they did, why they did it, how they did it, and which practices might be most effective for other institutions that wish to have similar results.

Safeguarding the Tower: IT Security in Higher Education 2006

drupal — Tue, 17 Oct 2006 12:18:46 -0500

Presentation at EDUCAUSE 2006, October 9-12, 2006, Dallas, Texas. This presentation summarizes the findings of the EDUCAUSE Center for Applied Research 2006 study of information technology security in higher education.

Safeguarding the Tower: IT Security in Higher Education 2006

drupal — Fri, 29 Sep 2006 11:59:55 -0500

When ECAR studied IT security in 2003, we discovered that despite efforts to develop a secure IT infrastructure in higher education, uneven management awareness and a culture that equated good IT security with the curtailment of academic freedom constrained IT security options and choices. The results of this 2006 study of IT security in higher education demonstrate that there has been a sea change in less than three years. This study not only assesses the current condition of IT security practice, but documents changes in practice over time among a constant set of respondents. Among 492 total survey respondents, fully 204 institutions responded to both the 2003 and the 2005 surveys. Extraordinary changes in both hard and soft security measures were reported. Nearly one-third of responding institutions now have a chief information security officer, and more than 60 percent of the 2005 respondents have a centralized IT security function. The study is supported with qualitative interviews from 18 higher education institutions and organizations and with three case studies.

Safeguarding the Tower: IT Security in Higher Education 2006 Roadmap

drupal — Fri, 29 Sep 2006 13:10:04 -0500

This roadmap synthesizes the important issues and recommended actions drawn from the ECAR study, Safeguarding the Tower: IT Security in Higher Education 2006. When ECAR studied IT security in 2003, we discovered that despite efforts to develop a secure IT infrastructure in higher education, uneven management awareness and a culture that equated good IT security with the curtailment of academic freedom constrained IT security options and choices. The results of this 2006 study of IT security in higher education demonstrate that there has been a sea change in less than three years. This study not only assesses the current condition of IT security practice, but documents changes in practice over time among a constant set of respondents. Among 492 total survey respondents, fully 204 institutions responded to both the 2003 and the 2005 surveys.

Safeguarding the Tower: IT Security in Higher Education 2006 – Key Findings

drupal — Fri, 29 Sep 2006 13:20:40 -0500

This document presents the key findings of the ECAR study, Safeguarding the Tower: IT Security in Higher Education 2006. When ECAR studied IT security in 2003, we discovered that despite efforts to develop a secure IT infrastructure in higher education, uneven management awareness and a culture that equated good IT security with the curtailment of academic freedom constrained IT security options and choices. The results of this 2006 study of IT security in higher education demonstrate that there has been a sea change in less than three years. This study not only assesses the current condition of IT security practice, but documents changes in practice over time among a constant set of respondents. Among 492 total survey respondents, fully 204 institutions responded to both the 2003 and the 2005 surveys. Extraordinary changes in both hard and soft security measures were reported. Nearly one-third of responding institutions now have a chief information security officer, and more than 60 percent of the 2005 respondents have a centralized IT security function. The study is supported with qualitative interviews from 18 higher education institutions and organizations and with three case studies.

Identity Management in Higher Education: A Baseline Study Key Findings

drupal — Mon, 17 Apr 2006 01:00:00 -0500

These Key Findings describe the major discoveries of the ECAR research study called "Identity Management in Higher Education: A Baseline Study". This ECAR research study illuminates findings from a survey of identity management practices in higher education. In addition to exploring the adoption of identity management technologies, the study examines the importance institutions place on the benefits of identity management and their ability to deliver those benefits; the motivations that drive institutions to adopt identity management and the challenges they face; the policies and plans being prepared to support identity management; how identity management projects are organized and what resources and staff are dedicated to them; and the factors that influence good outcomes in identity management investment and capability. The study is based on a literature review, consultation with a select group of individuals representing organizations involved in identity management, survey responses from 403 higher education institutions, and qualitative interviews with 36 executives and IT personnel from 24 institutions. A corporate edition is available here.

Identity Management in Higher Education: A Baseline Study Roadmap

drupal — Mon, 17 Apr 2006 01:00:00 -0500

This ECAR research study illuminates findings from a survey of identity management practices in higher education. In addition to exploring the adoption of identity management technologies, the study examines the importance institutions place on the benefits of identity management and their ability to deliver those benefits; the motivations that drive institutions to adopt identity management and the challenges they face; the policies and plans being prepared to support identity management; how identity management projects are organized and what resources and staff are dedicated to them; and the factors that influence good outcomes in identity management investment and capability. The study is based on a literature review, consultation with a select group of individuals representing organizations involved in identity management, survey responses from 403 higher education institutions, and qualitative interviews with 36 executives and IT personnel from 24 institutions. A corporate edition is available here.

Identity Management in Higher Education: A Baseline Study

drupal — Thu, 16 Mar 2006 13:26:23 -0600

IT Security in Higher Education, 2006

drupal — Mon, 31 Oct 2005 11:17:50 -0600

This survey instrument covers the security of networks and computing systems, including data, application, service, and operating systems.