Computer Network Security: Best Practices for Alberta School Jurisdictions

Abstract

This paper provides a snapshot of the computer network security industry and addresses specific issues related to network security in public education. The following topics are covered: (1) security policy, including reasons for establishing a policy, risk assessment, areas to consider, audit tools; (2) workstations, including physical security, protecting workstation components, and computer viruses; (3) the local network, including the OSI (Open Systems Interconnection) reference model, protocols, network segmentation, network management, network sniffing, and data encryption; (4) servers, including UNIX and other server operating systems; (5) remote access, including technologies, remote access servers, protocols, and authentication/authorization; (6) crackers and hackers, including threats and hacking tools/techniques; (7) Internet firewalls, including functions, issues and problems, types, rules, logs, firewall accessories, buying a firewall, and firewall administration; and (8) applications, including e-mail, directory services, the World Wide Web, and single sign on. Each section highlights unique requirements of school jurisdictions and contains a list of relevant web sites. A glossary of terms is provided, and appendices include descriptions of Windows NT Workstation and Server, Novell NetWare, and Apple Macintosh, as well as a security checklist and evaluation form and a list of related Alberta Education resources. (AEF)