Much of an information security professional’s job involves keeping outsiders away from the internal network. A great deal of time and money is spent on firewalls and Intrusion Detection Systems to protect server and client machines from threats coming from the Internet, limiting some attack vectors to only computers on the LAN. Physical security is also taken into consideration with access cards and locked doors to keep unwanted visitors off of the local network. This is all fine and good for corporate environments, but what about open environments like libraries and university campuses? When an organization’s purpose is the dissemination of knowledge, the paradigm (don’t you just love that word) of information security shifts tremendously and one cannot be sure that all users on the LAN are completely benevolent. This talk will be geared towards techs at universities, libraries and other open environments and will attempt to address common security problems and differences that pop up at these institutions.

Adrian Crenshaw has worked in the IT industry for the last sixteen years. He runs the information security website Irongeek.com, which specializes in videos and articles that illustrate how to use various pen-testing and security tools. He did the cert chase for a while (MCSE NT 4, CNE, A+, Network+. i-Net+) but stopped once he had to start paying for the tests himself. He’s currently working on a Masters in Security Informatics, and is interested in obtaining a network security/research/teaching job in academia. He is also one of the co-founders of Derbycon.

Download Slides

Back to Louisville InfoSec 2013 video list