Educause Security Discussion mailing list archives

Re: IHEs & NATIONAL STRATEGY: Single Point-Of-Contact


From: Kevin Shalla <Kevin.Shalla () IIT EDU>
Date: Mon, 23 Sep 2002 10:29:30 -0500

I believe it would be a good idea if it were cost-free, but alas it is
not.  I agree with others that the single person of contact is not really
feasible - for most campuses the campus police office would probably be the
only office staffed 24 X 7.  The police could have an on-call list of whom
to call during which times.  Problems with this could be the false alarms -
how could campus police triage and determine whether this is a serious
problem (hundreds of computers are launching denial of service attack)
versus moderate problem (one computer is scanning another computer) versus
annoyances (one computer has a virus, and it probably came from a computer
on our campus).  Large universities could afford additional staffing to
support this plan, small colleges would find this burdensome.

At 02:41 PM 9/19/2002 -0400, Rodney Petersen wrote:
One of the recommendations in the "National Strategy To Secure
Cyberspace" (www.securecyberspace.gov) is that "each college and
university should consider establishing a point-of-contact, reachable at
all times, to Internet service providers (ISPs) and law enforcement
officials in the event that the school's IT systems are discovered to be
launching cyber attacks."

Is this a good idea?

How could it be implemented across higher education?

What are obstacles or challenges for moving forward with this
recommendation?

Other comments or insights?


Kevin Shalla
Manager, Student Information Systems
Illinois Institute of Technology
<mailto:Kevin.Shalla () iit edu>

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.

Current thread: