1. Computer and Network Security Issues –the Security Officer’s Perspective Jeff Savoy, Information Security Officer

2. Agree with the concepts presented by Kathy Review some of our statistics from our response team abuse@wisc.edu Nickname “BadgIRT” Not all incidents are reported Computer and Networking Security Issues The Security Officer’s Perspective Slide 2

3. Slide 3

4. Slide 4

5. Sample of proactive measures Security web site at www.doit.wisc.edu/security Slide 5

6. Sample proactive measures (cont) Host a two day security conference (Lockdown) www.doit.wisc.edu/lockdown Slide 6

7. Vulnerability Scanning Centralized campus scanning Sample of proactive measures (cont) Provide campus access to ISS Internet Scanner Keys tied to their IP address range Self scans Schedule scans 4-6 times a year Forward results to computer owners High level scans, not as much detail as self scans Slide 7

8. Provide campus access to SANS “Step by Step” documents Sample of proactive measures (cont) Include Linux, Windows and Solaris Slide 8

9. Provide students with Norton anti-virus software Sample of proactive measures (cont) “Rules of the Road” campaign Awareness on appropriate use and security Include posters, student radio spots and videos Slide 9

10. Sample of proactive measures (cont) Slide 10

11. Sample of proactive measures (cont) Slide 11

12. Online information security training videos Future proactive measures Target both end users and administrators Campus wide intrusion detection Materials from CERIAS Center for Education and Research Information Assurance and Security www.cerias.purdue.edu/ Slide 12 Possible local certification program