Network Vulnerability Assessment

EDUCAUSE Library Items for Network Vulnerability Assessment

Information Security Program Assessment Tool

April 15, 2013

This self-assessment tool was created to evaluate the maturity of higher education information security programs using as a framework the International Organization for Standardization (ISO) 2700…

Network Registration System Scanner

January 1, 2004

As of fall 2003, the University of Connecticut network consists of approximately 20,000 hosts, 11,000 of which are in the residential halls. Our commercial Internet link is about 200 Mbps, and th…

Collaborative Information Security Project – Vulnerability Assessments

January 1, 2004

In 2001, five California community colleges and state universities began collaborating to address mutual security needs through a Title V grant. These institutions first came together as members …

Lessons Learned from RIT’s First Security Posture Assessment

January 1, 2004

Rochester Institute of Technology (RIT) is the 11th largest private university in the United States with approximately 22,500 hosts on our network. We have one of the largest computer science and…

Five-Year Rotating Audit Focus Based on Risk Assessment at Georgia Tech

January 1, 2004

Georgia Tech operates one of the most complex networks in the world. The institute has more than 30,000 machines accessing the backbone daily. Most legacy, state-of-the-market, and state-of-the-a…

Integrating Vulnerability Scanning with Web Authentication

January 1, 2004

During fall 2003, a large scale Internet worm (W32.Blaster) exploited a widely known Windows operating system vulnerability throughout academic institutions in the United States. This worm infect…

Unauthenticated Authentication: Null Bytes and the Affect on Web-based

January 1, 2006

This paper describes a vulnerability that may affect web-based applications that insecurely implement LDAP simple binds for the authentication of users. Web-based applications that fail to properly…

CyberCIEGE

January 13, 2010

CyberCIEGE enhances cyber security education and training through an extensible resource management video game similar to SimCity™ and RollerCoaster Tycoon®. In the CyberCIEGE virtual world, p…

Server hack at Georgetown University probed

January 1, 2006

Data on as many as 41,000 people may have been compromised. Data on as many as 41,000 people may have been compromised. …

Risk Management Framework

January 1, 2006

In recent years, higher education institutions have recognized the importance of developing and implementing strategies to manage information risk. Proper information risk management now translat…