CITES > CCSP HOME > FALL 2003 AGENDA

Staying Secure in a Threatening IT Environment: A Shared Responsibility

Thursday, November 20, 2003 – The Chancellor Convention Center

Session Descriptions & About the Presenters

Security: Planning for the Future

Stan will present the results of planning done in response to the recent computer attacks. These plans include departmental requests for more effective tools at the departmental level, and services at the campus level that enhance the ability of IT professionals to respond with CITES to security issues.
The results Stan will share are based on input from the ad hoc Committee on Cyber Security and the Faculty, the recommendations from the CC Town Meeting this fall, and the recommendations from three working groups who were investigating security threat assessment, technical solutions, and cultural feasibility.

Stan Yagi joined the University of Illinois at Urbana-Champaign, in August 2001, as Director of the Computing and Communications Services Office, and as Assistant Chief Information Officer. The 2002 reorganization resulted in a new organization name (CITES), and a new title for Stan: Assistant CIO for Information Technologies. Stan heads four divisions within CITES: Communications Technologies, directed by Beth Scheid; Customer Support and Information Services, directed by Mona Heath; Departmental Services, directed by Rich Williams; and Systems and Technology Services, directed by Randy Cetin.

Prior to accepting his current position, Stan served as the Director of Information Technology Services at Queen’s University, Kingston, Ontario, Canada. Stan brought to the U of I an outstanding reputation as a leader and a partner to academic departments, the library, and other groups in support of teaching and research needs. He has a long and distinguished career in Information Technologies and is active internationally in the computing and communications arenas.

A University Request for Proposal (RFP) for Anti-Virus Software

This overview will touch on:

• Status of RFP

• Reasons for a University-wide license

• Timeline for procurement

• Process for procurement

Input from the audience will be sought to determine the weight to assign each of the required and recommended features in the anti-virus software proposal.

Susan Lewis is the Deputy CIO for the campus. An important part of her portfolio is IT policy – creation, implementation, and education. Sue is a strong proponent of community input; she founded and chairs the Alliance of IT Service Providers and the Student Information Technology Advisory Board. She also chairs the AITS Advisory Board, and is an ex-officio member of the Information Technology Advisory Board. She has hosted several CCSP town meetings for CITES. Sue is currently leading the University anti-virus selection committee.

Using Bluestem Authentication in the ASP.NET Environment

After a review of ASP.NET Forms authentication and Bluestem authentication, we will explore how to use both together to create an easy-to-use Class for doing Bluestem authentication in the ASP.NET environment. With this Class, we can keep all the Bluestem-related things in one ASP.NET page, and transform the Bluestem authentication into a Forms authentication. Web authors can then concentrate on the application, without having to Bluestem enable each page. A completed Bluestem Class will be made available by download.

Dale Sinder is a Senior Research Programmer with the Integration and Software Engineering group of CITES. Dale specializes in Windows-based solutions. Dale has been involved in .NET development since the beta release of the .NET platform. Recent projects have included the NetID Change web application and an internal CITES staff directory. Dale is currently working in the area of Meta-Directories and directory reconciliation.

Configuration, Support, and Security for UIUCnet Wireless

Following a quick survey of 802.11 definitions and technology, we’ll go into support specifics for UIUCnet Wireless, including frequently asked questions from end users, and security concerns for wireless at user’s homes and other places off campus.

Debbie Fligor has been researching and developing wireless networking for CITES for 6 years; she is Service Manager of the UIUCnet Wireless service. Her other duties, as part of the Network Engineering Group, include assisting with the design and support of the campus backbone, dialup, ISDN, multicast, and other assorted things.

Installing, Configuring, and Maintaining Microsoft Windows Terminal Servers

This session will cover installing, configuring, securing, and maintaining Windows 2003 Terminal Services for either staff or student access. You’ll hear about installing programs so that the nag screens do not appear, no profile creation screens pop up, and users can concurrently use applications without interfering with each other’s programs. Other topics include securing access to machines, killing processes, and performing other tasks if the network goes down or a user process hangs the entire machine. Chris will mention features of clients for Windows, MAC OS, GNU/Linux, and Solaris. Chris will also discuss cloning disk images of the OS so that you can easily setup or restore machines in about an hour.

Chris Clausen is currently taking some time off from his studies in Computer Science at the University of Illinois to work in his chosen field of System Administration. He currently works for various UIUC departments and research groups as a primary admin, a consultant through Extra Help Services, and more recently serves the Aviation Research Lab. Chris experiments with new computer setups for the Association for Computing Machinery chapter on campus, where most of this presentation was tested over the past six months. He has delivered workshops on PERL, Networking, and Security at the Reflections-Projections student computing conference over the past several years.

Recent UIUCnet Changes for Performance, Reliability, and Security

It’s no news to anyone that, in the past couple of years, the Internet has become a downright dangerous place. Viruses and worms are getting better and more dangerous, and the increasing homogeneity of the installed computer base doesn’t help. If UIUC were a corporate network, we’d simply expose our one web and email server to the Internet, firewall off everything else, and lock it down tightly. But we’re not – we’re a somewhat loose association of colleges and departments connected together by a high-performance, enterprise-style network which makes it difficult to install control points at any given location.

At the same time, demands on the network constantly increase, while it is relied upon for more and more mission-critical applications. Our challenge is to continue to deploy a fast, efficient, enterprise-style network that can be centrally managed and operated, while also protecting departments from one another, and from ever-increasing dangers from the Internet. We’re getting there, but there’s a lot of work yet to be done, and some important questions are still unanswered.

This presentation will discuss these issues, and what’s been done on the UIUCnet backbone in the past several months to address them. We’ll also bandy about some of those tough questions.

Charley Kline has been the primary architect of UIUC’s communications network for eleven years. He manages the Network Engineering group within CITES Communication Technologies. Current projects within the group include development of network accounting and information databases for hosts on UIUCnet, deployment of wireless and VPN technologies, continued re-engineering of the UIUCnet core to meet changing needs of the campus, and research in advanced technologies such as IP Telephony, IPv6, and very high speed network access.

Patch Management: A Piece of the IT Security Puzzle

Dreaded by some and overlooked by many, patch management is a necessary component of a secure computing environment. Learn more about patch management concepts, how better patch management can reduce administrative costs, and about the unique challenges facing system/network administrators on this campus. Following the presentation, participate in an open forum exploring the future of campus-wide patch management service offerings.

Erik Coleman joined UIUC in September 2000 to develop and serve as technical lead for the Windows Systems Group (WSG). WSG is a division of CITES Systems and Technology Services supporting core production systems based on Microsoft Windows Server platforms. Erik also spent some time with the Production Systems Group (PSG) managing many of the core UNIX-based systems. He graduated in 1990 from UIUC with a Bachelor of Science degree in Computer Engineering and has over 15 years of experience in system management and support in a wide variety of operating systems.

Security in the Classroom

This presentation will provide an overview of the physical and network security actions centered around the Integrated Teaching Systems (ITS). The effects on instruction, the effects to design, and how ITS communicates with our instructors.

Daniel Doolen has been working in the electronic communications field for over thirty years. He has gained work experience from service in the United States Navy, with the cable TV industry, and here at the University of Illinois. Presently the Director of CITES Classroom Technologies, he holds the classification of Chief Instructional Media Systems Engineer. Dan graduated from Eastern Illinois University and is currently pursuing a Masters degree. In addition, Dan was awarded the Chancellor’s Distinguished Staff Award in 2001.

Thomas Kunka is the Coordinator of Network Systems and Operations and is responsible for support and planning in all aspects of computing technology and networking in the ITS classrooms as well as internal operations. In addition to his administrative and technical roles here at the University of Illinois at Urbana-Champaign, he continues to be an active instructor teaching corporate workshops in web and graphic design.

Brian McNurlen is the Senior Coordinator of Classroom Support and Training. He provides assistance to UIUC faculty who are teaching with educational technologies in the ITS classrooms. In addition to pursuing a graduate degree in educational psychology at UIUC, Brian has five years of teaching experience at the university level, and has published research in the areas of learning and instruction. He has also produced workshops for teachers interested in collaborative technologies for education.

"Ask the Experts”

Presentations include:

• Encryption Software Such as PGP and GNUPG
• Keylogging Devices
• Networking
• Wireless

And more!

Appearances include:

• CITES Advanced Technology Training and Microsoft IT Academy
• CITES Classroom Technologies
• CITES Customer Service
• CITES Documentation Group
• CITES Exchange Services
• CITES Software Services and WebStore