In Brief
Universities Get Hacked the Hardest
Decentralized networks, curious students made colleges frequent victims of hacking
By Kathleen Carr
July 01, 2005 — CSO —
According to California's Office of Privacy Protection, 28 percent of that state's security breaches since 2003 have taken place at a college or university. The people we talked to say it's not a surprise. Why? Three reasons.
First, college networks are decentralized; some of their infrastructure is outdated; and there is a lack of training and accountability among students, faculty and staff, says Connie Sadler, director of IT security at Brown University. In addition, students who consider hacking a game and are out to prove their ability view colleges and universities as excellent targets.
Second, hackers start out by trying to get into their own records, and then they move into more sophisticated infrastructures, says Larry Ponemon, adjunct professor of ethics and privacy at Carnegie Mellon University and founder of the Ponemon Institute, a think tank whose mission is to advance privacy management practices in business and government. High school and college students tend to hack institutions with which they already have a relationship.
And third, colleges and universities have done a poor job vetting business partners who handle data in their work, Ponemon says. Colleges in general need to do a better job vetting the technology controls—for example, at a student loan services company or other partner—before entering into a business relationship, Ponemon adds.
Other stories by Kathleen Carr
CSO
Security Directions: A Virtual Conference
Available On Demand Sept. 30 - Dec. 30
Join us for a virtual event with candid, expert information on top security challenges and issues - all from the comfort of your desktop.
Protecting PII: How to Work with IT to Manage Risk
Understand the critical nature of the test data privacy problem and get tips on how to work with IT to implement a test data privacy program.



