Top Banner
How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii [email protected]
32

How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Dec 21, 2015

Download

Documents

Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

How Hawaii Does It:IT Security for K-20: Bridging the

Islands

Jodi ItoInformation Security Officer

Information Technology ServicesUniversity of Hawaii

[email protected]

Page 2: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Agenda

Background HENC & HERN State Network K-12 & University Environments Security Challenges Where we are today

Page 3: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Geography of Hawaii

Page 4: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Island Facts Population of Hawaii: approx. 1.2 million

Oahu: pop. 900,000; 597 sq. miles Kauai: pop. 55,000; 533 sq. miles Maui: pop. 92,000; 727 sq. miles Molokai: pop. 7000; 261 sq. miles Lanai: pop. 3000; 144 sq. miles Hawaii (Big Island): pop. 135,000; 4027 sq. miles

and still growing

Page 5: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Hawaii Education Network Consortium (HENC)

Established in 1993 Collaboration between: University of Hawaii

(UH), Hawaii State Department of Education (HiDOE), Hawaii Association of Independent Schools (HAIS), East-West Center (EWC)

Facilitate & coordinate Hawaii-based activities relating to the development, promotion and support of telecommunications technology in education and research

www.hawaii.edu/henc

Page 6: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Ke Ala 'Ike: Path of Knowledge

One of the initial HENC projects Mission:

interconnect all public educational institutions provide ALL Hawaii students & educators equal access

to information resources, the Internet and related national and international networking initiatives;

provide in-service training & research opportunities regarding networking services and especially as applied to transforming education to meet society's changing needs;

provide access to educational electronic information resources to the public in their homes and workplaces.

Page 7: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Hawaii Education & Research Network (HERN)

NSF Grant: $4M over 3 years (1995-1998) To study:

Develop the management procedures & organizational methods to support a statewide educational network

Develop and institutionalize methods for training network users

Experiment with educational reforms to prepare Hawaii students to be competitive in the 21st century workplace

Page 8: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Statewide IP Backbone

Leverage Wide-Area Assets Analog + digital microwave radio INET fiber capacity assets Carrier connectivity Specialized links (Loe’a, 802.11)

Internet + Internet2 Long-Haul connections Local backup commodity HIX

Page 9: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Statewide IP Backbone

KauaiCC

SD

Catalyst8500

Power Supply 0CISCO YSTEMSS Power Supply 1

SwitchPr ocessor

SER IE S

UH-Manoa

SD

Catalyst8500

Power Supply 0CISCO YSTEMSS Power Supply 1

SwitchPr ocessor

SER IE S

Lanai Ed Ctr

Molokai Ed Ctr

MCC

Puu Nia Niau

SD

Catalyst8500

Power Supply 0CISCO YSTEMSS Power Supply 1

SwitchPr ocessor

SER IE S

Hana Ed Ctr

Kaupulehu

UHC-West HI

SD

Catalyst8500

Power Supply 0CISCO YSTEMSS Power Supply 1

SwitchPr ocessor

SER IE S

Puu Kilea

University of HawaiiUHNet Interisland IP Network

Legend:

July, 2002ypyun

via HITS (OC-3)

SD

Catalyst8500

Power Supply 0CISCO YSTEMSS Power Supply 1

SwitchPr ocessor

SER IE S

SD

Catalyst8500

Power Supply 0CISCO YSTEMSS Power Supply 1

SwitchPr ocessor

SER IE S

SD

Catalyst8500

Power Supply 0CISCO YSTEMSS Power Supply 1

SwitchPr ocessor

SER IE S

SD

Catalyst8500

Power Supply 0CISCO YSTEMSS Power Supply 1

SwitchProcessor

SER IE S

SD

Catalyst8500

Power Supply 0CISCO YSTEMSS Power Supply 1

SwitchPr ocessor

SER IE S

SD

Catalyst8500

Power Supply 0CISCO YSTEMSS Power Supply 1

SwitchPr ocessor

SER IE S

UH-Hilo

SD

Catalyst8500

Power Supply 0CISCO YSTEMSS Power Supply 1

SwitchPr ocessor

SER IE S

Temp. DS3 via PLNI

SD

Catalyst8500

Power Supply 0CISCO YSTEMSS Power Supply 1

SwitchPr ocessor

SER IE S

HawCC

SD

Catalyst8500

Power Supply 0CISCO YSTEMSS Power Supply 1

SwitchPr ocessor

SER IE S

MRTC

Projected mid-2003 Availability

via I-Net Fiber (OC-3and Gigabit Ethernet)

SD

Catalyst8500

Power Supply 0CISCO YSTEMSS Power Supply 1

SwitchPr ocessor

SER IE S

SD

Catalyst8500

Power Supply 0CISCO YSTEMSS Power Supply 1

SwitchPr ocessor

SER IE S

SD

Catalyst8500

Power Supply 0CISCO YSTEMSS Power Supply 1

SwitchPr ocessor

SER IE S

Page 10: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Microwave Network

Page 11: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

The Hawaii GigaPoP

Hawaii GigaPoP @ UH-Manoa

(IPv4, Multicast, IPv6)

DoD HIC

BYUH

CommodityInternetConnections

Hawaii DOE

Mauna Kea

Internet2(PNWGP)DREN

100Mb -> 175Mb(local)

OC3(mainland)

HIXGigE

MHPCC

PMRF

“Hui”

SPAWAR

State of Hawaii

East-West Center

UH Campuses

Japan R&E(APAN)

Australia R&E(AARNet)

2x10G+OC3OC3

2x10G+OC3

Page 12: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

K-12 Environment

One Unified School District for entire state Single Board of Education (13 elected, 1

non-voting student) 286 schools ( 256 regular, 2 special, 28

charter) 181,000 students

State Superintendent Complex Superintendents for each

complexSuperintendent

Patricia Hamamoto

Page 13: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Schools By Island

Hawaii: 54 Niihau: 1 Kauai: 18 Lanai: 1 Maui: 26 Molokai: 6 Oahu: 180

Page 14: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Distance Learning TeleSchool Branch

Responsible for distribution/production of video programming & management of video conferencing network

http://www.teleschool.k12.hi.us E-school

USDOE Challenge Grant Offer high school credit courses through the use of

multimedia technologies & the Internet http://www.eschool.k12.hi.us

Video Conferencing Facilities at almost every school

Page 15: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Technology Support

State Level: Network Support Services Branch (NSSB) Manage Wide Area Network (WAN) Statewide policies including security policies Provide guidance and support for school networks

& video conferencing (including purchasing contracts, hardware & software standardization)

http://nssb.k12.hi.us/ School Level: Technology Resource Teacher

Page 16: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

UH Governance

One public higher education system Governed by one Board of Regents;

15 regents appointed by the Governor Approved by Legislature

Office of the President Each campus: Chancellor

President David McClain

Page 17: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

The University of Hawaii System

Hawaii

UH Campuses

University of Hawaii Education Center

Kauai

Oahu

Lanai

MolokaiMaui

•30+ assorted research facilities, including biomedical•Multiple astronomy facilities•Several ships and a harbor•Marine biology on a 7th island•Global reach

Page 18: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

UH Campuses

Total Enrollment: 50,000 students Four year institutions:

UH Manoa: Flagship research campus; 20,000 students

UH West Oahu: upper division campus; 860 students

UH Hilo: Bachelors & Masters’ degrees; 3400 students

Page 19: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

UH Community College Campuses

Honolulu CC: 4200 students Kapiolani CC: 7300 students Leeward CC: 5700 students Windward CC: 1700 students Maui CC: 2900 students Kauai CC: 1100 students Hawaii CC: 2400 students

Page 20: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

University & Education Centers

3 University Centers: facilitates the delivery of 4 year & advanced degrees via distance learning technologies

4 Education Centers: facilitates the delivery associate degrees or certificates via distance learning technologies

Page 21: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

UH Distance Learning

Two way interactive video (HITS) Broadcast Cable TV On-line http://www.hawaii.edu/uhcc.e-learn/ http://www.hawaii.edu/dl/ HITS site at every campus

Page 22: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

UH Technology Support

System level: VP IT & CIO Office - Information Technology Services

Manage Wide Area Network and Manoa Campus Network (voice, video, data)

System-wide policies including security policies Provide guidance and support for campus networks &

video conferencing (including purchasing contracts, hardware & software standardization)

Campus (& some departments/units: have IT Support Staff

Highly decentralized http://www.hawaii.edu/its/

Page 23: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Security Similarities

HiDOE Spam Filter Anti-Virus Software Policies:

Acceptable Use Policy Internet Access Policies School policies

Intrusion Prevention System

UH Spam Filter Anti-Virus Software Policies:

Acceptable Use Policy General Confidentiality

Notice Information Security Policy Campus policies

Intrusion Prevention System (Planned)

Page 24: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Additional HiDOE Security

Central Firewall Proxy Server Content Scanner IPS @ each school NSSB meets with Technology

Coordinators twice a year Will run scans against school

computers on request

Page 25: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

UH Security Infrastructure

Anti Spyware software Firewall for institutional applications Access Control Lists (ACLs) at border routers Information security standards (encryption,

deletion, disposal, etc.) Campuses and/or departments may have

own firewalls Training - ad hoc

Page 26: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

UH & HiDOE Infrastructure

Hawaii GigaPoP @ UH-Manoa

(IPv4, Multicast, IPv6)

CommodityInternetConnectionsHawaii DOE

Hawaii CC

100Mb -> 175Mb(local)

OC3(mainland)

HIXGigE

UH Hilo

Kauai CC

Maui CC

UH WOLeeward CC

Honolulu CC

Kapiolani CC

WindwardCC

Firewall

Firewall

Firewall

Firewall

Firewall

IPS

Page 27: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Security Challenges Security is as strong as the weakest link Technology is constantly evolving Threats are constantly changing

Phishing, Malware, Botnets, Insider threat, etc. Underground economy Technology & threats are changing faster than

humans can learn Make security training meaningful Protect the network vs. Protect the information

Page 28: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

More Security Issues

“Cyber” Bullying (K-12) Plagiarism & Copyright & P2P On-line Predators (K-12) Social Networks Protecting Privacy

“Cultural Transformation”

Page 29: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Partnerships

Leverage relationships Infragard - Hawaii Chapter: Internet Safety

Award Video Contest State of Hawaii, UH, Infragard, HiDOE* -

unified effort to deliver IT security message Leverage resources: Educause,

EduTech, iKeepSafe, iSafe, FTC, etc.

Page 30: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Resources

doe.k12.hi.us/technology/ nssb.k12.hi.us/ www.hawaii.edu/its/ www.edutech.nodak.edu/ its.ndsu.edu/ www.internetsafetyawards.org/ connect.educause.edu/ www.educause.edu/

Page 31: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

More Links

www.ftc.gov onguardonline.gov/index.html www.whoswatchingcharlottesville.org www.vascan.org www.ikeepsafe.org www.isafe.org www.staysafeonline.org

Page 32: How Hawaii Does It: IT Security for K-20: Bridging the Islands Jodi Ito Information Security Officer Information Technology Services University of Hawaii.

Thank You!

[email protected]

(808) 956-2400