How UNB is using policy, practice and technology to enhance cyber security

No ratings

Presented at Atlseccon 2015 by

David Shipley

Universities are among the highest risk targets for cyber threats due to their nature as places that promote the exchange of information. Encouraging and helping 10 000+ minds to collaborate and research on a range of topics is a challenging mission for any IT organization. Having to secure that environment is even tougher. The University of New Brunswick's IT Security Action Team faces a range of threats on a daily basis. From hactivists to denial of service (DDoS) attacks, from target intrusions to trying to handle the daily deluge of malicious software, this team has seen it all. In this talk, UNB's David Shipley will discuss the team's approach to securing this vibrant environment while helping the University achieve it's educational and research objectives. With that foundation in place, David will discuss how UNB put in place a monitoring practice that helps the team efficiently manage their incident response process. This provides the team with the visibility they need to see what's happening on their networks and the threat intelligence they need to properly react. By using the right combination of technology and processes, the team at UNB has managed to strike the right balance between reactive and proactive security. This talk will highlight the techniques they used so you can do the same.