Network World
Tuesday, December 2, 2008
DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools

Temple getting tough

Related links

Security Notes RSS feed

E-mail Ellen Messmer

Security Notes archive.

Security forum
Discuss Security Notes and other Security topics.


Universities are naturally more free-wheeling places than the corporate environment, with the collegiate "live and let live" attitude making IT campus administrators reluctant to press for mandatory security controls on student computers.

Students, after all, are paying customers, not employees getting a paycheck, and the idea of forcing students -- who often own their own laptops -- to do anything in particular is often seen as quixotic.

But with the waves of computer worms --Blaster, SQL Slammer, Welchia, and so forth--disrupting college campus networks, IT administrators show signs they're ready to take a different tact. Some are making it mandatory for students to run corporate-style anti-virus software on their personal computers. Temple University's chief information security officer, Ariel Silverstone, recently discussed how his university is going to do just that.

"We're going to make anti-virus software free but mandatory for anyone who gets an IP address from us, whether employee, faculty or student," said Silverstone. "You have to get an IP address to get connected to the campus. Now, the main goal is to protect the servers and computers." He reckons the university has about 14,000 IP-based devices attached to its network.

The impetus to make anti-virus software mandatory for students along with others on campus stems from the fact that 50% of all security incidents on campus are related to computer viruses and worms, Silverstone said.

"Machines are compromised and shut down by this," he said. The cost to de-bug machines and cope with service calls from viruses is skyrocketing. That's one reason the IT staff has gotten the backing from the campus administration to support the cost of providing free software to students and requiring them to use it.

Silverstone, who said his previous job was working as a global business manager at KPMG, said he prepared a product checklist as he began the contract negotiation process with about eight vendors. After a competitive procurement process, Temple ended up selecting the Symantec anti-virus suite in a contest where Network Associates and Trend Micro were narrowly edged out in a final review.

"Cost was decidedly not a factor," Silverstone noted, pointing out that several other factors, such as the automated update capability and technical and helpdesk support, were important in completing the negotiations for the three-year contract.

Back to Security Notes

Comments

Post a comment

Name:


E-mail address:


URL:


Comments:


Remember info?






Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.