1. Security Infrastructure Panel: Implications for Network Engineering  Dave Dittrich, U. Washington  Gary Dobbins, Notre Dame  Gerry Sneeringer, U. Md - College Park  Jack Suess, U. Md. - Baltimore County

2. Institutional Differences  Big difference in size  Big difference in complexity  Big difference in degree of centralization  Less difference in staffing

3. Security Concerns  Securing Windows, DoS attacks - wash  User practices, policy formation, policy adherence, vendor products, and security products that scale - ND  Access controls/IDS at Gigabit speed, coordinating decentralized admins, Resnet - UMCP  Increasing security requirements (HIPAA/GLB), disaster recovery and contingency planning, host security - UMBC

4. Border Security  All but UW use ACL’s, UW is open  UMBC implementing border firewalls  ND and UMCP are researching firewall Is there value in border firewalls?

5. Interior Network Security  Interior firewall for sensitive areas  UW uses logical firewall  Snort IDS used by all but UW  Security VLAN’s being implemented by UMBC  VPN available by all Should security model be 1-size fits all? Who is responsible for interior security?

6. Wireless Security  All run open wireless networks  All encourage VPN  UW prototyping UW-only  UMCP implementing Veneer  UMBC moving to limit unauth wireless How are campuses architecting wireless? Is authentication critical?

7. Host Application Security  Cooperation among security, networks, and sysadmins is critical  Host firewalls being used by all  All encourage encryption to varying degrees  Virus scanning is done to some degree by all How do you get cooperation among groups? How do you encourage encryption? How do you encourage Host firewalls?

8. Recent Security Problem and Cause Discuss a recent or upcoming security problem  Windows - poor user passwords  SQL Slammer  Hacks for spamming, students paid to spam  Sendmail buffer overflow Does security staff handle RIAA or Spam complaints? How is policy developed?

9. Questions and URL’s Campus Security URL’s  www.washington.edu/itsecurity www.washington.edu/itsecurity  Itsecurity.umd.edu  www.nd.edu/~ndoit/virusalert www.nd.edu/~ndoit/virusalert  www.umbc.edu/oit/security www.umbc.edu/oit/security QUESTIONS???