Resources

Overview

The EDUCAUSE Cybersecurity Resource Page provides information related to all aspects of cybersecurity for higher education, with an emphasis on strategies, policies, and other tools that will assist institutions of higher education to prevent, detect, and respond to vulnerabilities that threaten college and university computers and networks. It aggregates information from blogs, podcasts, conference sessions, EDUCAUSE publications, and more.

The Information Security Guide: Effective Practices & Solutions for Higher Education shares practical approaches to preventing, detecting, and responding to IT security problems in a wide range of higher education environments. The guide offers campus case studies and toolkits on a variety of topics. The guide can be made even more effective by contributing information of your own.

The EDUCAUSE/Internet2 Higher Education Information Security Council (formerly the Security Task Force) and its partners hold an annual Computer Security Awareness Poster & Video Contest to raise awareness of and increase computer security at colleges and universities. These student-created materials are available for use in campus security awareness campaigns during student orientation, National Cyber Security Awareness Month (October), and throughout the year. Winning poster and video entries in the 2009 contest, as well as the 2007 and 2006 contests, are available online. Visit the Cybersecurity Awareness Resource Library for a compilation of cybersecurity awareness materials for colleges and universities.

Sponsored by the Higher Education Information Security Council, the Security Discussion Group provides a forum to identify problems and share strategies or solutions to improve the security of college and university computers and networks. The discussion group also informs the council leadership of current issues and trends and helps identify and promote effective practices. Subscribe to the group or browse discussion archives.

Other Resources

EDUCAUSE and Internet2 Discussion Groups

• EDUCAUSE Chief Information Officers (CIO) Constituent Group
• Identity Management Discussion Group
• EDUCAUSE Policy and Law (ICPL) Constituent Group
• EDUCAUSE Security Discussion Group
• Internet2 Health Sciences Security SIG

Mailing Lists and USENET Newsgroups

• Bugtraq
• Computer Security USENET Newsgroups (comp.security)
• Computer System Security Issues (alt.security)
• Computer Viruses and Security (comp.virus)
• Incidents (Archive)
• PatchManagement.org
• Public Risks from Computers and Users (comp.risks)
• RESNET–L
• UNISOG (SANS University Security): This listserv is specifically designed to have a place for security points of contact at Universities to discuss issues that are being faced.
• US–CERT National Cyber Alert System Bulletins & Alerts
• Vuln–Dev

Magazines and News Sources

• Computerworld Security News
• CSO (Chief Security Officer) Online Magazine
• IEEE Security & Privacy Magazine
• Information Security Magazine
• Network World Fusion
• SANS Internet Storm Center
• SC Magazine
• Security Magazine
• The Chronicle of Higher Education

Newsletters

• Microsoft Security Newsletter for IT Pros
• SANS Newsletters

Security Organizations and Associations

• American Council on Education (ACE) Higher Education & National Affairs
• Association for Computer Security Day
• Association for Computing Machinery (ACM)
• Center for Education and Research in Information Assurance and Security (CERIAS)
• Center for Internet Security (CIS)
• CERT Coordination Center (CERT/CC)
• CIO Council
• Colloquium for Information Systems Security Education (CISSE)
• Computer Security Institute (CSI)
• Computing Technology Industry Association (CompTIA)
• Information Systems Audit and Control Association (ISACA)
• Information Systems Security Association (ISSA)
• InfraGard
• Institute for Information Infrastructure Protection (I3P)
• Internet Security Alliance
• Markle Foundation Task Force on National Security in the Information Age
• National Information Assurance Training and Education Center (NIATEC)
• National Institute of Standards and Technology (NIST) Computer Security Resource Center (CSRC)
• National Security Agency (NSA)
• Partnership for Critical Infrastructure Security (PCIS)
• SANS Institute
• U.S. Department of Defense Information Assurance Technology Analysis Center (IATAC)
• U.S. Department of Justice Computer Crime and Intellectual Property Section (CCIPS)
• Virginia Alliance for Secure Computing and Networking