Identifying and Implementing a Coordinated Strategy for Computer and Network Security for Higher Education

EDUCAUSE最近被联邦政府的关键基础设施保证办公室（CIAO）要求协调高等教育界对国家网络安全战略的贡献。这份报告定于今年夏天由关键基础设施保护委员会提交给美国总统，将审查以下问题：政府的作用、私营部门的贡献、是否需要立法以及改进安全教育的影响。本提案中的活动将为这一重要的国家努力做出直接贡献。研究和教育界迫切需要有效和高效的策略来保护其联网计算机。高校计算机系统的安全性已经成为高等教育和更大的互联网社区至关重要的问题。在一个众所周知的例子中，校园网络上的易受攻击系统被牵连为对关键政府和商业互联网网站的分布式拒绝服务（DDOS）攻击的未知参与者。学院和大学的计算机系统也成为攻击的目标，暴露了机密的医疗和学生记录。高等教育界需要一个全面和系统的网络安全战略，包括管理层对这一问题至关重要性的认识。需要在两个方面采取协调一致的办法：（1）检查和识别有关支持安全操作的可用技术、政策和程序的最佳实践，以及（2）出版物、演示文稿，为了完成这些任务，EDUCAUSE将汇集技术和高等教育商业实践和政策方面的领先专家，以开发解决高等教育界这些问题的最佳实用方法。EDUCAUSE将通过广泛的国家和地区会议、面向IT人员和高等教育管理人员的出版物、网络图书馆以及通过美国教育理事会（ACE）、全国学院和大学商务官员协会（NACUBO）和全国学院和大学律师协会（NACUA）等合作伙伴组织传播最佳实践。这项提议的工作将建立在EDUCAUSE/Internet 2安全工作组、成员机构、SANS和CERT之前的工作基础上，并将寻求将联邦政府和私营企业的最大努力结合起来。

EDUCAUSE has recently been asked by the Critical Infrastructure Assurance Office (CIAO) of the federal government to coordinate the contributions of the higher education community to the National Strategy to Secure Cyberspace. This report, scheduled to be delivered from the Critical Infrastructure Protection Board to the President of the United States this summer, will examine the following: government's role, private sector contributions, whether or not legislation is needed, and the impact of improved security education. The activities in this proposal will make a direct contribution toward this important national effort.The research and education community faces a pressing need for effective and efficientstrategies for securing its networked computers. The security of college and universitycomputer systems has become a matter of critical importance for higher education and the greater Internet community. In one well-known example, vulnerable systems on campus networks have been implicated as unknowing participants in a Distributed Denial of Service (DDOS) attack on critical government and commercial Internet sites. College and university computer systems have also been the target of attacks, exposing confidential medical and student records. A comprehensive and systematic cybersecurity strategy is needed in the higher education community, including an executive-level appreciation for the critical importance of this problem.There is a need for a coordinated approach on two fronts: (1) the examination andidentification of best practices regarding available technologies, policies, and procedures to support secure operations, and (2) publications, presentations, and other communication methods to disseminate these best practices throughout the research andeducation community.To accomplish these tasks, EDUCAUSE will bring together the leading experts in bothtechnology and higher education business practices and policies to develop the bestpractical approach to solving these problems in the higher education community. EDUCAUSE will distribute the best practices though extensive national and regional meetings,publications for IT staff as well as higher education executives, web libraries, and through partner organizations such as the American Council on Education (ACE), theNational Association of College and University Business Officers (NACUBO), and theNational Association of College and University Attorneys (NACUA). This proposed effort will build on previous work by the EDUCAUSE/Internet2 Security Taskforce, member institutions, SANS, and CERT and would seek to incorporate the best efforts of the federal government and private industry.