Components

• Arpwatch – used for MAC anomaly detection.
• P0f – used for passive OS detection and OS change analysis.
• Pads – used for service anomaly detection.
• Nessus – used for vulnerability assessment and for cross correlation (IDS vs Security Scanner).
• Snort – the IDS, also used for cross correlation with nessus.
• Spade – the statistical packet anomaly detection engine. Used to gain knowledge about attacks without signatures.
• Tcptrack – used for session data information which can prove useful for attack correlation.
• Ntop – which builds an impressive network information database from which we can identify aberrant behavior/anomaly detection.
• Nagios – fed from the host asset database, it monitors host and service availability information.
• Osiris – a great HIDS.
• OCS-NG – cross-platform inventory solution.
• OSSEC – integrity, rootkit, registry detection, and more.

The criteria states faculty must have a Bachelors in CS, CIS or MIS to teach any computer discipline.  

The comments were:

- CS is a theoretical degree not practical
- Industry certifications should be valued.
- Mathematics degrees should be valued.
- Technical programs should not require CS degrees
- Bachelors degree with experience in field and/or industry certification
- What about AAS degree with industry experience and certification
- AAS - only require AAS..Bachelors require a bachelors.

In this session, we also heard from Joanne Simsner.  Joanne discussed the creation of a state assessment for students graduating from computer networking programs.  This assessment will serve the purpose of documenting successful use of Perkins funds.  We also recieved an invitation to attend a CTL IT Workshop on 4/8 & 4/9 at Hennepin Technical College.  www.advanceitmn.org/itworkshop

CISOs take measured steps to reduce social media risks

The increasing use of social media in the enterprise puts CISOs on guard. In this article, review a recent report from Forrester Research that indicates that the adoption of social media in the enterprise has doubled, from 11% in 2008 to 22% in 2009. Forrester urges security pros to take measured steps to reduce social media risks, rather than completely banning it, as many companies have found great success targeting specific audiences via social networking.

http://go.techtarget.com/r/10917457/9545757

Preparing for future security threats, evolving malware

Most security attacks get more dangerous over time, and the same can be said for malware. Malware is set to make major advancements in 2010, as criminals find new ways to monetize malicious activity.

Access this article to learn how your enterprise can most effectively combat malware through a combination of best practices and the use of emerging technologies.

http://go.techtarget.com/r/10917458/9545757

Cloud computing in 2010: Be ready for risk management challenges

Cloud computing will most likely have a place in your 2010 security strategy. Whether you've implemented the technology and are struggling with fall-out issues or are weighing the pros and cons, access this article for concrete tips on dealing with its challenges and risks.

http://go.techtarget.com/r/10917459/9545757

Knowledge-based authentication treads lightly on privacy issues

Knowledge-based authentication (KBA) systems must maintain a delicate balance between reducing fraud and making users feel uneasy. KBA questions have been used primarily by financial firms to verify customers in high-value transactions for nearly a decade, but today use has expanded. Access this article to learn more about KBA and how vendors are acquiring the private information they need to execute on this authentication method.

http://go.techtarget.com/r/10917460/9545757 

Network Security Model - The definition of a Network Security model By Josh Backfield

The Open Systems Interconnection model (OSI), developed in 1983 by the International Organization for Standardization (ISO), has been used as a framework to teach networking basics and troubleshoot networking issues for the last 25 years. It has been so influential in network development and architecture that even most of the network communication protocols in use today have a structure that is based on it. But just as the OSI model never fails us, we find that we are lacking a standard that all network security professionals can adhere to, a Network Security Model (NSM). Today's sophisticated and complex networks provide the fundamental need for the NSM.

Read this White Paper

An excellent resource for teaching Network Security concepts.