Top Online Security Threats IU:

1
Top Online Security Threats_at_IU
It isnt magic, or is it?

• Ralph Quarles
• Assistant Director Operations Manager
• IU Library Information Technology
• http//www.quarles.info
• Indiana Online Users Group Nov 5, 2004
• http//www.iolug.org

2
If we had the Hogwarts library

• Preparation Mapping the forest
• Threat 1 Students with broken magic wands
• Threat 2 Teaching good spellcasting
• Threat 3 Defense against the dark arts

3
Mapping the Forest

• Almost 1000 workstations across 25 libraries
• Windows XP, Linux, Mac
• Laptops for loan to students and staff
• Pocket PCs, PDAs, printers, oh my
• Wireless EVERYWHERE
• Database driven web intranet with access to
  over 21,000 subscribed electronic resources
• Users who want it all from their home systems too
• Oh yes..over 5 million books also!

4
Broken magic wands

• 1 threat poor or outdated configurations
• 60,000 networked devices at IU, all connected!
• Public workstations
• Staff workstations
• Home workstations
• Protecting users from themselves

5
Teaching good spellcasting

• 1 No or poor password account security
• Preserving privacy
• Networking and passwords
• Considerations of a good password
• Guarding against disguises

6
Defense against the dark arts

• 3 Intrusions from within or without
• Layered defenses
• Watch the approaches
• Identify whats normal
• Use the magic you have
• Know some really powerful wizards

7
Where to start

• CA State Library InfoPeople project security
  guide for libraries
• http//www.infopeople.org/howto/security/
• TX State Library guide to security in small
  libraries
• http//www.tsl.state.tx.us/ld/pubs/compsecurity/
• IU IT Security Office How to guides
• http//www.itso.iu.edu/howto
• http//kb.indiana.edu (Knowledge Base)
• SAN Inst. Top 20
• http//www.sans.org/top20/
• Seek the entrance to the forums!
• Example Discussion regarding various workstation
  lockdown products

8
Questions?
UVA Video closer local online