TechTalks Event
Privacy, Security and Handling Academic Business
with guest expert Mark Bruhn,
Acting Information Technology Policy Officer
for the Vice President for Information Technology Indiana University
May 27, 1998
Audio
• Streaming
MP3
• Download
MP3 (Download
Tips)
Welcome to the Privacy, Security and Handling Academic Business web page. This RealAudio event was led by Mark Bruhn on Wednesday May 27.
Mark
discussed some of the hottest issues in networking today - ensuring
security in interactions over the net. Mark also answered questions
about how and when it is wise and necessary to protect the privacy
of individuals on the net.
Some of the key questions that Mark discussed included:
- How is the explosion in Internet access by "civilians" affecting technology policy and security on our campuses? What are examples of abuse or misuse and security incidents that we are dealing with as a result?
- How do we address (or who can address) the policy questions that are at the core of the security strategies? What organizational structure can facilitate developing and publicizing the needed policies and standards of behavior, and then perform the subsequent interaction with other agencies in investigating and resolving violations?
- What about dorms, and other student areas? Off campus students? Mobile computing? How do we secure our networks, yet provide needed access?
- How do we authenticate and authorize users for use of licensed resources?
- How do we do academic and other business on the net? What should people think about before they buy something on the net?
References for our conversation included:
The Network Security Roadmap
http://www.sans.org/roadmap.htm
Cornell Policy & Law Computer
Policy Collection
http://www.cornell.edu/CPL/Policies/
Junk Email Resources Page
http://www.junkemail.org/
NetLaw U.S.
http://www.netlaw.com/netlawus.htm
The SSL protocol
http://home.netscape.com/newsref/std/SSL.html
Internet Hoaxes and Chain Mail
http://ciac.llnl.gov/ciac/CIACHoaxes.html
An Analysis of Security Incidents on the Internet 1989-1995
by Dr. John D. Howard
http://www.cert.org/research/JHThesis/index.html
Good list of recently published books in security and privacy
http://www.itd.nrl.navy.mil/ITD/5540/ieee/cipher/readers-guide/new-books
-list.html
Staff dealing with technology usage and abuse should always have and reference their local academic and HR handbooks, as well as any local ethics publications.
A good exercise: using the search engine at
http://altavista.digital.com
(or a search service of your choice), search for this: privacy AND
security AND technology. Peruse the result for a weatlh of good
material.
