CCSP - Computer Consultant Support Program FALL 2005

REGISTRATION IS CLOSED

Agenda

Tuesday, October 25, Holiday Inn,
1001 Killarney, Urbana, IL (map)

This conference is possible through the sponsorship of CITES and our corporate partners.

Click session titles for presentation descriptions and speakers' biographical notes. (Note that printed agendas will be available at the conference.)

8:15 – 8:55

REGISTRATION AND CHECK-IN

9:00 – 9:05

Welcome [Salon A]
Peter Siegel, CIO, University of Illinois at Urbana-Champaign

9:05 – 10:00

Information Security in the 21st Century [Salon A]
Bill Boni, Vice President and Chief Information Security Officer, Motorola Information Protection Services

10:00 – 10:15

BREAK

10:15 – 11:10

Concurrent Sessions *1

11:20 – 12:10

Concurrent Sessions *2

12:25 – 1:25

LUNCH

1:30 – 2:20

An Unveiling of the Fifth-Generation UIUCnet Network Core [Salon A]
Charley Kline, CITES Communications Technologies
Slides (210 Kb ppt)

2:30 – 3:20

Concurrent Sessions *3

3:20 – 3:40

BREAK

3:40 – 4:30

CSI – Illini: Computer Forensics in the Campus Environment [Salon A]
Slides (4M ppt)
Scott Ksander, IT Security and Privacy, Purdue University

4:30 – 4:45

Conference Closing and Give-Aways (must be present to win) [Salon A]
 

12:30 – 5:30

TECHNOLOGY SHOWCASE   [Killarney's Lounge]
 

4:45 – 6:00

WINE AND CHEESE RECEPTION [Killarney's Lounge]
 

Session Descriptions and Presenter Information

Welcome

Peter M. Siegel is the first permanent Chief Information Officer at the University of Illinois at Urbana-Champaign. He was named to that position in August 2000. Peter, who is also Associate Provost, is responsible for leadership in identifying the role that information and learning technologies can play in supporting the campus mission. As CIO, Peter works with the campus community to understand their varied needs and directions, and to nurture innovative use of information technologies within the colleges and among central units. In spring 2002, Peter reorganized the central computing, educational technologies, computer labs, and data and voice communications units into an integrated organization, Campus Information Technologies and Educational Services (CITES).

In addition to his active community engagement and outreach, Peter is also involved in national and state professional organizations. He is a member of the EDUCAUSE 2005 National Conference Program Committee and is currently serving on the EDUCAUSE Security Task Force Executive Committee. He is also the out-going editor of the EDUCAUSE Review column, New Horizons. Peter is actively involved in the Committee on Institutional Cooperation (Big 10 Plus) CIO group. He is active in forums relating to the intersection between information technologies and physical security, including recent U.S. Secret Service and State of Illinois activities in Homeland Security. Peter is an invited speaker in the area of computer security and national IT policy issues, speaking before computing, telecommunications, policy, and law enforcement communities.

Information Security in the 21st Century

Information Security in the 21st Century – This “don't miss” session will present the perspective of one of the leading information security practitioners in the USA who has been actively working in the security profession nearly 30 years. The new risks arising from mobility, cyber-crime and global operations, as well as the many challenges arising from increased regulatory demands have raised the visibility and importance of information security. The convergence of physical and information security allows new approaches to risk management that leverage integrated protection programs to efficiently address a complex array of threats and vulnerabilities. 

William C. Boni has spent his entire professional career as an information protection specialist and has assisted major organizations in both the public and private sectors. For more than 29 years, beginning as a Special Agent in Army Counter-intelligence, Bill has helped a variety of organizations design and implement cost-effective programs to protect both tangible and intangible assets. In a wide range of assignments Bill has assisted clients in safeguarding their digital assets, especially their key intellectual property, against the many threats arising from the global Internet. In addition, he has pioneered the innovative application of emerging technologies including computer forensics, intrusion detection and others, to deal with incidents directed against electronic business systems.

Bill has served as a consultant in several professional service organizations and now works as the Vice President and Chief Information Security Officer of Motorola Information Protection Services. He is responsible for the company's overall program to protect critical digital proprietary information, intellectual property and trade secrets. He also directs the people, processes, and technology programs that safeguard the company's global network, computer systems and electronic business initiatives.

Bill has been quoted by leading print publications such as The Wall Street Journal , US News & World Report, The Financial Times, LA Times, and CIO Magazine. He has also appeared on many network broadcasts including Prime Time Live , CNN and CNN/fn discussing espionage and cyber crimes directed against American high technology corporations. Other assignments in his distinguished career include work as a U.S. Army Counter-intelligence Officer; Federal Agent and Investigator; Investigator and Security Consultant; Vice President of Information Security for First Interstate Bank; and Project Security Officer for “Star Wars” programs and other defense work with Hughes Aircraft Company and Rockwell.

Bill is the past chair of the American Society of Industrial Security (ASIS) Council on Safeguarding Proprietary Information ( http://www.asisonline.org/safeguarding.html ) and co-authored both the 1999 and 2001 ASIS-PwC Report on Loss of Proprietary Information. He chaired the 1999 Information Systems Audit and Control Association annual conference on Computer Audit and Security. Bill is on the Board of Directors of the International Society for Policing Cyberspace ( http://www.polcyb.org ) where he established the International Cybercrime Law Enforcement Award. He has served as industry delegate to the G-8 Cyber Crime Task Force, sponsored by the U.S. Department of Justice. He is Vice President and Board member of the global Information Systems Audit and Control Association (ISACA).

In July 2003, he received a CSO “Compass Award” from the publisher's of Chief Security Officer magazine recognizing him as one of a handful of thought leaders who “helped build security culture not just in their own organization but in the broader business community and the nation.” He holds the Certified Information Security Manager (CISM) from ISACA and has held both the Certified Protection Professional (CPP) from ASIS International, and Certified Information Systems Auditor (CISA).

Bill is co-author of, I-Way Robbery: Crime on the Internet , and High Tech Investigator's Handbook: Working in the Global Environment, published by Butterworth-Heinemann ( www.bh.com) in 1999. His most recent book Netspionage: The Global Threat to Information was released in September 2000.

UIUC Active Directory Issues and Future Direction

The UIUC Active Directory has entered its sixth year on campus, now the largest and most widely-used directory service on campus for centralized user authentication, authorization, and management of distributed computing environments for departments and units of all sizes.

This panel will discuss some best practices and new improvements, as well as explore the future direction of the UIUC Active Directory service with feedback from campus netadmins.

Randy Cetin joined CITES in 1986 as research programmer in the “Graphics Group,” and has since held numerous positions in the organization. Currently, Randy is the Director of CITES Systems and Technology Services.

The division encompasses a wide range of service responsibilities that include the CITES computer labs, cost-recovery services for Unix workstations, CITES' two data centers and Operations Center , management of numerous production servers and services, and the development of integration tools and infrastructure services.

An alumnus of the University of Illinois, Randy never received the memo indicating it was “OK” to leave campus after graduation and has been here ever since.

Alex Breen graduated from the University of Illinois in 1989. He spent the next six years working as the network administrator in Agricultural Engineering (now called Agricultural and Biological Engineering).  For the last ten years, he has worked for CITES Departmental Services in a variety of roles, such as OCCSS/Lincoln Hall Network Administrator, Manager of CITES OnSite Consulting, and Manager of Departmental Services Technical Operations. Alex was one of a group of CITES Departmental Services consultants who participated in creating the UIUC Active Directory back in 2000. Alex is an original member of CCSP and still finds it valuable to compare and discuss what's going on in different units and departments on campus.

Erik Coleman has been with CITES for five years, serving as technical lead for Windows Systems with the Systems Management Group (part of CITES Systems and Technology Services) supporting many core production systems based on Microsoft Windows Server platforms, such as the UIUC Active Directory. Erik also spent time as a UNIX system administrator with the former Production Systems Group (PSG). He graduated in 1990 from UIUC with a Bachelor of Science degree in Computer Engineering and has over 17 years of experience in system management and support in a wide variety of operating systems. When away from work, Erik spends most of his free time with his wife and three children.

Devin Gengelbach  is a Windows Systems administrator within the System Management Group (part of CITES Systems and Technology Services). He has worked for CITES for twelve years in various capacities including being a charter member of the OpCenter Staff and an Operator in the Machine Room. Devin's current responsibilities include system management of several Windows based servers providing core services to campus -- most notably the UIUC Active Directory and the campus implementation of Microsoft Windows Server Update Services (WSUS). In his spare time Devin can be found playing pool or camping with friends.

Spring Secure Remote Access Initiative

Spring Secure Remote Access Initiative - Beginning in late 2005 or early 2006 CITES Security will be focusing its security awareness efforts on a Secure Remote Access initiative. Many users resist using any sort of VPN solution and fail to appreciate the security risks associated with laptops and accessing miscellaneous networks. CITES Security has put together an educational program to introduce users to a number of concepts and practices. These include the usual suspects (anti-spyware and anti-virus software) as well as data and laptop security issues. This session outlines this initiative and requests feedback on the program as well as help to identify opportunities for localization of the program for units wishing to offer it directly. Mike Corn joined CITES as the Director of Security Services and Information Privacy in December 2003. Mike originally came to Urbana for graduate school and has worked and taught in both the School of Music and the Department of Astronomy. During the mid to late 90's he worked as a developer, database designer, and policy wonk with University Administration. He lives in Urbana with his (still) aging Labrador Shiva and a vastly younger pup named Newt.

Linux Clustering for Scientific Computing

This overview offers a basic introduction to Linux clustering for scientific computing (as opposed to high-availability). Starting with a discussion of why clusters are useful and how they work, we will discuss topics such as:

How do I determine that I need a cluster?
What do I need before I buy anything?
How do I purchase a cluster?
What choices do I have in software?
How do I deploy the software effectively?
What benefits will this really offer me?
How much work is this really going to be?

If time permits, presenters may also discuss advanced topics such as queuing systems and programming techniques.

James Phillips joined the Theoretical and Computational Biophysics Group (TCBG) in the Beckman Institute as a physics graduate student in 1994. Having finished his Ph.D., he is now a Senior Research Programmer responsible for the highly parallel molecular dynamics code NAMD, for which he and collaborators in the UIUC Parallel Programming Laboratory received a Gordon Bell Award at SC2002. Dr. Phillips has played a major role in the design, installation, and operation of four generations of Linux clusters serving the simulation needs of TCBG researchers.

Tim Skirvin is a Senior Systems Administrator for the Theoretical and Computational Biophysics Group (TCBG) in the Beckman Institute. He has been working as a system administrator in some form on campus for seven years, and has spent much of the last five of those years working with Linux clusters; these are documented at http://www.ks.uiuc.edu/Development/Computers/Cluster/ .

Tim is also the president of Usenet @ UIUC, an organization that still runs a free campus Usenet news server (see http://news.ks.uiuc.edu/ ).

CITES Network Administrator Support

UIUCnet is changing, as are the challenges facing campus Network Administrators. CITES has traditionally been a resource for support in some areas but not in others. Network and desktop security are ever-increasing areas of concern. Mike Corn, Director of Security Services and Information Privacy, and Mike Smeltzer, Director of CITES Network Communications have been out talking to campus Net Admins and asking them what they need from CITES to help them do their jobs. Come hear what they have been hearing and add your own ideas to the discussion.

Mike Smeltzer has been CITES' Director of Network Communications since March of 2005. In that role he has focused on coordinating campus input and collaboration on the Campus Network Upgrade project, and also worked with campus units on projects that are “outside the box.” If you need help making “the box” a little bigger, Mike is your guy.

Mike came to CITES from McLeodUSA, where he was the local Operations Manager. In that capacity, he worked with the campus on a variety of voice and data projects. In addition to working in the communications industry, Mike has been a faculty member in both the UIUC College of Communications and University High School , and was publisher and general manager of the Illini Media Company.

Mike Corn joined CITES as the Director of Security Services and Information Privacy in December 2003. Mike originally came to Urbana for graduate school and has worked and taught in both the School of Music and the Department of Astronomy. During the mid to late 90's he worked as a developer, database designer, and policy wonk with University Administration. He lives in Urbana with his (still) aging Labrador Shiva and a vastly younger pup named Newt.

Developing an Open Source Infrastructure

The Graduate School of Library and Information Science consists of over 1000 students, faculty, and staff. Computational needs range from basic word processing, Banner access, and HTML/XML editing to Java code development, data mining and database systems, and cluster computing. This creates several paradigms of computing from simple computing to high-end research. Since several people have multiple roles, various aspects of computational need have to be integrated into one common system.

The core of the system is based on SaMBa and LDAP for authentication; SaMBa, NFS, and WebDAV for file sharing; SaMBa and CUPS for printing; Apache for web services; and PostgreSQL and MySQL for database systems. LDAP is used for central authentication for Linux and MacOS X computers, and LDAP with SaMBa for Windows computers. This allows all three platforms to share a common user name and password database. File services are offered with NFS, SaMBa, and WebDAV allowing all centrally managed machines to share a common file system and remote machines easy access to those files. This presentation will focus on configuring servers and workstations to use LDAP/SaMBa for authentication, and system configuration for a shared file space that is platform independent.

Brynnen Owen is a Computer Systems Specialist with the Graduate School of Library and Information Sciences. He is co-head of the GSLIS Systems Group, which is responsible for core operations of computer systems. Computer usage in GSLIS varies from simple word processing and web browsing to advanced information systems research.

Brynnen joined the University community in 1994 as a graduate student in Physics. While part of the nuclear physic space program, he helped manage Unix systems necessary for research. While finishing his Ph.D., he joined CITES Departmental Services working with Prairienet (a community network supported by GSLIS) to assist in LDAP directory service migration. Later, he joined GSLIS full-time in his current position.

Neil Thackeray has worked on systems for the Graduate School of Library and Information Science since March of 2001. He was originally hired for workstation support and server maintenance for GSLIS offices and instruction labs. Soon he became co-head of the Systems Group where he collaborated with other GSLIS units to redesign the infrastructure to better serve all GSLIS users. Since then, the Systems Group at GSLIS has implemented an infrastructure capable for supporting the needs for all faculty and staff at GSLIS.

An Unveiling of the Fifth-Generation UIUCnet Network Core

Network equipment becomes obsolete even faster than desktop PC's; since its inception, the UIUCnet backbone network has been through four major designs. A part of the funding for the Campus Network Upgrade Project provides for an entire replacement of the UIUCnet core and distribution equipment. This is exciting because it will be the first time we will be able to replace the entire backbone at once, without needing to re-use and re-purpose old backbone equipment.

The new core has been under design for many months and specifically addresses security and reliability concerns that have reared their heads over the lifetimes of previous designs. It includes in-building routers, provisions for departmental firewalls, and unprecedented performance improvements over the current core design. It will be built out of the newest routing and switching technology, and the equipment will be selected with an eye on future technologies such as IP Version 6 and MPLS.

Charley Kline will provide an overview of the planning design process and the first glimpses at the resulting design.

Charley Kline has been the primary architect of UIUC's communications network for thirteen years. He manages the Network Engineering group in CITES Communications Technologies. Current group projects include development of network accounting and information databases for hosts on UIUCnet, deployment of wireless and VPN technologies, continued re-engineering of the UIUCnet core to meet changing needs of the campus, and research in advanced technologies such as IP Telephony, IPv6, and very high speed network access.

Authentication Issues and Plans

CITES is undertaking a long-term effort to produce an authentication service which is customer friendly, and extensible to campus units, while maintaining sufficient security, privacy, and audit ability. Key elements of this authentication roadmap include reduction in passwords, a federated authentication framework, and high level, multifactor authentication services. This panel will discuss issues associated with this effort and implications of an authentication roadmap for campus.

Rich Williams is Director of CITES Departmental Services. For over 30 years, he has been involved in information technology and services at the University of Illinois at Urbana-Champaign. His experience runs the gamut from data analyst in the age of mainframes to management of one of the top self-supporting academic IT units focused on distributed services to colleges and departments.

Randy Cetin joined CITES in 1986 as research programmer in the “Graphics Group,” and has since held numerous positions in the organization. Currently, Randy is the Director of CITES Systems and Technology Services.

The division encompasses a wide range of service responsibilities that include the CITES computer labs, cost-recovery services for Unix workstations, CITES' two data centers and Operations Center, management of numerous production servers and services, and the development of integration tools and infrastructure services.

An alumnus of the University of Illinois, Randy never received the memo indicating it was “OK” to leave campus after graduation and has been here ever since.

Mike Corn joined CITES as the Director of Security Services and Information Privacy in December 2003. Mike originally came to Urbana for graduate school and has worked and taught in both the School of Music and the Department of Astronomy. During the mid to late 90's he worked as a developer, database designer, and policy wonk with University Administration. He lives in Urbana with his (still) aging Labrador Shiva and a vastly younger pup named Newt.

Mike Grady holds the position of Senior Technology Architect and Strategist within CITES. A focus of the position is to coordinate the CITES effort to identify, assess, and prioritize emerging IT technologies, needs, and architectures that will be strategic to the campus in the next several years. Another focus is to develop roadmaps that provide CITES and the campus information on the direction of key CITES services over the next months and years. Mike is also active in the Internet2 community, participating in middleware-related efforts. Mike has worked full time for the University since 1978, and for CITES since 1985. During his time with CITES, he has worked in computer graphics, consulting, information retrieval, full-text indexing and searching, web application development, service management, directory services, and management of software development.

Chuck Thompson manages IT services for the Department of Computer Science where he has spent most of the last 18 years as either a student or staff member. In conjunction with the department's move to the Siebel Center for Computer Science, Chuck has overseen an upgrade of the department's entire computing infrastructure. This new infrastructure embraces the goal of ubiquitous computing by providing easy but secure access for faculty and students to shared resources through SAN technology, distributed servers and extensive wired and wireless networking. Chuck serves on the Senate IT Committee, the UIUC Virtual CERT team and is actively involved with IT efforts within the College of Engineering.

Neil Thackeray has worked on systems for the Graduate School of Library and Information Science since March of 2001. He was originally hired for workstation support and server maintenance for GSLIS offices and instruction labs. Soon he became co-head of the Systems Group where he collaborated with other GSLIS units to redesign the infrastructure to better serve all GSLIS users. Since then the Systems Group at GSLIS has implemented an infrastructure capable for supporting the needs for all faculty and staff at GSLIS.

Dialing Down the Volume: Partnership between ATLAS and CITES in the Learning Technology Arena

This session will focus on the opportunities and challenges for the College of Liberal Arts & Sciences and CITES as they support teaching and learning with technology. We will examine the goals and support services offered by each group in meeting the needs of instructors. A central theme looks at how CITES and LAS have collaborated on projects and shared information when faculty request a service not offered by either group. How we work together as professionals creates meaningful opportunities for new partnerships and initiatives and is a necessary coping strategy in the challenging budget environment.

Lanny Arvan is the Assistant CIO for Educational Technologies and an Associate Professor of Economics. He oversees CITES ClassTech and CITES EdTech and has responsibility to serve as an ambassador and promoter of learning technology around campus. His blog, Lanny on Learning Technology, has a fair international readership and gives his views on a host of issues the campus must address in the teaching and learning with technology area.

Craig Jackson is the Director of an instructional and information technology center (ATLAS) in the College of Liberal Arts & Sciences since 2003. Previously, he was a consultant for CITES/Departmental Services after leaving Student Affairs where he worked as an Assistant Dean for eight years. He is a graduate of the University of Pittsburgh , and holds a Masters' Degree in Higher Education Administration from Southern Illinois University at Carbondale .

UIUCnet Wireless – Coming Soon to a Public Space Near You?

As the Campus Network Upgrade moves into its second of five years, UIUCnet Wireless coverage across the campus is expanding in "public spaces." What is a "public space?” Can departments and colleges roll out their own wireless services? Is your building on the Network Upgrade list for the coming year? What is the deal with our authentication systems for UIUCnet Wireless? What is going on with wireless on the South Farms? The answers to these questions and more will be provided by CITES Wireless and VPN Service Managers, Debbie Fligor and Mary Stevens. CITES Director of Network Communications, Mike Smeltzer, will improvise the rest of the answers and will attempt to keep order in what promises to be a free-flowing exchange of ideas with the audience and a look at the direction the campus is headed with the UIUCnet Wireless service.

Mike Smeltzer has been CITES' Director of Network Communications since March of 2005. In that role he has focused on coordinating campus input and collaboration on the Campus Network Upgrade project, and also worked with campus units on projects that are “outside the box.” If you need help making “the box” a little bigger, Mike is your guy.

Mike came to CITES from McLeodUSA, where he was the local Operations Manager. In that capacity, he worked with the campus on a variety of voice and data projects. In addition to working in the communications industry, Mike has been a faculty member in both the UIUC College of Communications and University High School , and was publisher and general manager of the Illini Media Company.

Debbie Fligor has been working for CITES in some form or another since she was a student in 1988. Many folks in CCSP met Debbie when she was a member of the NDO from 1993-2000 and worked on building designs across campus. She is currently working in Network Engineering where she does various interesting things including researching wireless technologies and acting as the Service Manager for UIUCnet Wireless. She's been interested in radios since first getting her ham license in 1981, went on to get a BSEE here at UIUC, and has been investigating wireless network technologies since the NDO first got a set of Motorola wireless bridges around 1993-94.

Mary Stevens has worked for CITES for the past eight years. She worked the first few years as a CITES Departmental Services consultant. She supported a broad range of users and platforms in several departments on campus. Currently, she works in Network Engineering where she is the Service Manager for the campus firewalls, and the campus VPN. She is the Technical Manager of the campus IPS devices, and she is also the backup Service Manager for UIUCnet Wireless.

Computer Forensics in the Campus Environment

Computer Forensics is not just about "computer crime."  As faculty, staff, and students in the campus environment increasingly use technology for all aspects of everyday life, the need to have the capability and capacity to gather forensics information from these sources is increasing. While requests are now coming regularly from law enforcement to campus IT groups, we are also seeing the need for forensics in IT Incident Response, support of HR activities, cases involving academic dishonesty, violations of University policy, and more.

The purpose of this presentation will be to discuss the areas of computer forensics that need to be considered in a campus IT environment.  It will also look at the relationships that need to be built within the campus environment with groups such as Campus Police, Dean of Students, Human Resources, and Employee Relations. It will present some practical information on ways to build this capability and some real-world campus examples.

Scott Ksander is currently the Senior Inforensics Analyst/Engineer with the IT Security and Privacy group at Purdue University and also an Assistant Professor with the Department of Computer Technology teaching classes dealing with Computer Forensics. Over the past few years, Scott has worked to develop a strong relationship with local law enforcement authorities to provide information forensics support. He also holds a position as Investigative Consultant for the Tippecanoe County Coroner, as well as serving as a consultant for Purdue Police, West Lafayette Police, Lafayette Police, and the Tippecanoe County Prosecutor. Scott also works regularly with the Indiana State Police and the FBI.

Scott has developed various training courses for law enforcement, and has taught them for local and State law enforcement agencies throughout Indiana . He is currently working to develop a Regional Inforensics Center to further assist law enforcement, and to provide training and research opportunities in information forensics for students and faculty at Purdue.

Scott is also actively involved with students on the Purdue campus. He has served almost 15 years with the University's Faculty Fellows program, and was recognized by the Purdue Alumni Association with their Special Boilermaker Award, which recognizes “individuals who have contributed significantly to improving the quality of life and betterment of the educational experience for Purdue students.”

Scott is a self-described "computer geek." His passion for computing and technology started as the result of a 5th grade science project, and has continued ever since. Scott received a BS degree in Computer Science from Purdue University in 1974. He then joined Control Data Corporation in Minneapolis, Minnesota, where he worked with the operating systems development group for Control Data's high performance, research computer systems. He left Control Data in 1984 to join ETA Systems to help design and build what was, at that time, the world's fastest supercomputer. In 1987, Scott returned to Purdue to join the Purdue University Computing Center.  Scott served as an Associate Director of the Computing Center, responsible for building the campus data network and the instructional computing facilities.

It has been said that "law enforcement people are from Mars and technology people are from Venus." Scott's work over the past few years has been dedicated to bringing those two groups together to ensure that law enforcement has access to the wealth of information available from information forensics.