1. Distance Education Team 2 Security Architectures and Analysis

2. Distance Education Team 2 Members Chris Rush – Team Leader, Step 1 Mike Gazdus – A/V Expert, Step 1 Ron Banjeree – Tech Analyst, Step 2 Russ Griffith – Tech Analyst, Step 2 Scott Currie – Scribe, Step 3 Chris Ameter – Tech Analyst, Step 3 Jack Pickett – Tech Analyst, Step 3 Raman Rangswamy – Tech Analyst, Step 4 Ayman Lugman – Tech Analyst, Step 4

3. Distance Education Plan of Attack 1. Team/Strategy Meeting 18 SEP 01 2. Initiate email traffic to all team members 3. Initial DE Meeting – 20 SEP 01 4. Start Part 2, 3, 4 teams on their presentations 5. Follow-up DE Meeting for remaining team members – 24 SEP 01 6. Establish weekly meeting schedule with Director, of Distance Education for Software Engineering-CMU 7. Set meeting times for team member feedback

4. Distance Education CMU-DE Organizational Mission: “To offer the same high quality MSE courses currently available to resident students, through the use of on-line, Computer Based Training (CBT), and two-way audio two-way video through Distance Education”. Mel Rosso-Llopart Mel Rosso-Llopart Director, Distance Education

5. ADMIN Server Windows NT Oracle Product Server Linux/Apache My SQL E-mail Communication Tech Support CD – Lecture Material Web support people Class Web -Calendar - Assignments - Submit work - Assigned Reading - Files -Student Billing -Course Mgmt. - Program Mgmt DE instructor Tech support people Student Administrator

6. Network Topology DE System Computer Science Department WWW

7. Distance Education Requirements Phase: Current business requirements - HUB billing integration for payment verification - Server upgrades - Expand - Expanded coverage of database to the entire university - Initiate study of streaming technologies

8. Distance Education Requirements Phase, cont.: Future Requirements - Integration of course material within the campus Blackboard tm learning management system - Streaming Media incorporation within courses - Increase availability/access from a current student load of 150 students to a future load of 500 load of 150 students to a future load of 500 - Branding of On-line version of DE delivery - Search for software solutions for management and course delivery, either COTS or developed internally

9. Distance Education Computer Security Policies - Current focus is Quality and Course Content - No formal policy in place - Blanket coverage provided by CMU master firewall only Areas of concern - SSL encryption for web server - Virus protection for both servers - Maintenance software patches for OS’s - Secure communications to the HUB for account status

10. System State ADMIN Server Windows NT Oracle Product Server Linux/Apache My SQL E-mail Communication Virus/Worm? Virus

11. Distance Education Observations: - Adherence to current security policy is poor - Administration server is currently out of commission due to virus or worm - Commitment to commercial mailing of courseware - Administrative overhead and additional costs - Courseware development - Current development time 6-12 months per course - Course is developed by the instructor only - Modular courseware should be considered for established courses

12. Business Mission II How does this project fit the business mission? “My main concern is with delivery of content and quality to those who pay for the course.” Mel Rosso-Llopart Director, Distance Education Director, Distance Education

13. Business Mission II We must ensure content delivery and quality by providing: –Confidentiality to DE students –Integrity of course materials –Availability of servers to deliver content * We need to make sure this system is survivable.