"Young, Beth A." wrote:
>
> 1. Departments on Univ campuses are run like individual fiefdoms.
As the nature of our computing environment has changed, and with it
the incidents and effects of computer abuse, computer security has
become more like public safety, telecommunications, and other issues
critical to the organization as a whole. Some universities have
already recognized this:
http://www.itc.virginia.edu/security/policyguide.html
> 2. Students in Residential housing.
This is changing too. From the policy referenced above:
===========================================================
Scope
This policy applies to anyone in the university community owning or
overseeing the use of a computing device of any type connected to
the University of Virginia network, including but not limited to:
<snip-gf>
b. Faculty, staff, students and other individuals who have devices
connected to UVa's network, even if those devices were acquired
personally, i.e. not with university or grant funds;
===========================================================
I think it is important to recognize that the the model of tens of
thousands of student residence computers connected to a high bandwidth
network is no different than the growing cable and DSL connected home
computers. I read one report that estimates that in 2002 there will be
17,000,000 computers connected in this manner. While a university may
scan on-campus residence networks for vulnerabilities and limit access
accordingly, who is going to do it for those 17,000,000 home computers?
--
Gary Flynn
Security Engineer - Technical Services
James Madison University
Please R.U.N.S.A.F.E.
http://www.jmu.edu/computing/info-security/engineering/runsafe.shtml
S/MIME Cryptographic Signature
