Security Management and Intrusion Detection and Prevention

The 2008 Data Breach Investigations Report draws from over 500 forensic engagements handled by the Verizon Business Investigative Response team over a four-year period. Tens of thousands of data points weave together the stories and statistics from compromise victims around the world. This report seeks to answer the following questions;

• Who is behind data breaches?
• How do breaches occur?
• What commonalities exist?
• Where should mitigation efforts be focused?

Windows desktops are widely deployed and can be subject to multiple attack vectors. Windows 2000, XP, and Vista have vulnerabilities that should be mitigated effectively by network security teams or by end users. This session will cover the top security vulnerabilities in Windows desktops and how to secure them quickly and effectively.

Presenting two best-practice models for cyber incidents: To prevent cyber incidents, learn how to use an uncomplicated cyber risk assessment to help you focus your institution's limited resources. When an incident occurs, know how to douse the effect of breach events when notification is required.

Five experienced CIOs discuss security, staffing, and how they respond to changing technology on campus.

The Maricopa Community Colleges consist of 10 colleges, two skill centers, and many college satellite centers, including classes being held at the Arizona state prison. More than 200,000 students are enrolled, supported by approximately 11,000 employees. This translates to roughly 25,000 network hosts. Maricopa has a decentralized administration, with each college having a president and a full complement of deans. The district office administration handles core, centralized, administrative operations such as human resources and financials. The colleges have diverse missions, from purely occupational to largely academic colleges. One college is solely distance learning.

This research bulletin summarizes how Emory University used the results of a security survey of higher education institutions to make important, peer-informed decisions on how to secure and protect its computing environment. It includes an analysis of the statistical information they gathered and details about the security initiatives they implemented after compiling and reviewing survey results.