Computer Security Video Contest View Computer Security

Computer Security Video Contest View

Computer Security Student Video Jodi Ito – University of Hawaii Scott Ksander – Purdue University David Lyon – Cal Poly Pomona University Andre Tan - Research. Channel

Credits • • • Rodney Peterson, EDUCAUSE Valerie Vogel, EDUCAUSE Hye Ok Park, Cal Poly Pomona Imran Hamid, Cal Poly Pomona Student Video Contest Team We are grateful for their support in creating the contest and providing assistance for this session.

Credits • Professor Anna Carlin, Cal Poly Pomona • Michael Wong, KPMG A big thank you for agreeing to be on our panel.

Agenda • • • Security Task Force Awareness and Training Working Group Student Video Contest Past and Present Purdue Case Study Pomona Case Study Panel Discussion (videoconf participants) – Professor Anna Carlin, Cal Poly Pomona – Michael Wong, KPMG

EDUCAUSE Security Task Force • Joint task force between EDUCAUSE and Internet 2 • Established in 2000 • Goals: Improve information security and privacy across the higher education sector by actively developing and promoting effective practices and solutions for the protection of critical IT assets and infrastructures

STF Working Groups • • • Effective Practices Policy & Legal Issues Awareness & Training Risk Assessment Security Professionals Conference Program Committee • Internet 2 Initiatives: – SALSA Net. Auth Working Group

Working Group Products • • Confidential Data Handling Toolkit Effective IT Security Practices Guide Data Classification Guide National Cyber Security Awareness Month Toolkit

A&T Working Group The Awareness and Training Working group • “The Awareness and Training Working Group identifies and take steps to implement and publicize various methods by which awareness of information technology security issues is raised among university and college computer and network users, administrators, and executives. ”

A&T Working Group • What it does: – Disseminate information that can improve security awareness in higher education – Brainstorm about a variety of topics – Evaluate training options – Work with National Cyber Security Alliance – Partner with the educational community (events, etc)

Promote NCSAM • October is National Cyber Security Awareness Month • Encourage higher ed institutions to develop and host activities focusing on Cyber Security Awareness • Develop a resource list of activities and provide resource kits to those just starting

NCSA National Cyber Security Alliance • Creating a culture of cyber security • Non profit partnering with government, corporate and education • Providing knowledge and tools

Coming Soon…. • National Cyber Security Awareness Campaign • Target Audience: Higher Education • Goals: – Unified message, catchy slogan/theme – Message templates – PSAs, podcasts, video & audio clips • Timeline: mid-2009

How it all started … • The student video contest came out of the task force as a major initiative in 2005. • The main goal was to raise awareness of security related issues.

Student Video Contest Project • The EDUCAUSE/Internet 2 Student Video Contest sub-project was created. • A team was formed and work began in January 2005 with a kick-off meeting.

The First Contest • Define categories (broad and single topic) • Define judging criteria (Creative, technical, content, effectiveness, shelf life) • Sponsorship sought (NCSA and prize money)

Video Requirements • Up to 3 minute videos for a broad student audience • Help students protect their computers/personal information • Examples for potential topics provided • No school references allowed • Deadline of Sep 01/2005 – extended to Nov. to allow more participation

Here ye, here ye! • STUDENT VIDEO CONTEST AIMS TO RAISE COMPUTER SECURITY AWARENESS Help us spread the word about the EDUCAUSE/Internet 2 Computer and Network Security Task Force student video contest on computer security …. .

Marketing • • EDUCAUSE website and listservs EDUCAUSE Quarterly and Review Chronicle of Higher Education National Associations Res. Net list University Systems (CSU/UC, others) Get the word out locally – be creative

Marketing • The website was developed • www. educause. edu/Security. Video. Contest/ 7103 • How-to documents to help with promotion at all levels were created and made available • The site now contains the winning videos

Judging • Judging panel was comprised of people with varying backgrounds • The panel included at least one student • Judging scale of 1 -10 used for each criteria • Each judge viewed 60 videos (excluding entries from their institutions) • Can you say: time consuming!

Winning videos • Winners were selected for creativity, content and quality of information, overall effectiveness of the delivery, and technical quality. Cash prizes were awarded to winners in each category. The two “gold” winners received $1, 000, two “silver” winners received $800, and two “bronze” winners received $500 in cash prizes.

What we got… • Creative • Funny • Serious • Shock • Animation • Illustration Deciding on winners was hard!

Public Service Announcement View

and RAP! View

What They Said • The survey results were very positive (20 responded) • Recommendations (based on survey and team input): – – – – Make judging easier (streamline it – two rounds – divide up work) Require specific video format for submissions Have two categories (PSA 30 second and 2 minute) Make announcements over the school year – not in summer only Preamble (terms of use) and standardization of credits Get sponsorship prior to contest announcement Create certificates for winners Create another survey for applicants after winners announced (what was liked/disliked)

Second Annual Contest • Partnership with the Research Channel • Research Channel hosted submission site and winning videos • Research Channel provided streamlined judging site – a wonderful improvement • Changes for third annual contest

Second Annual Contest • Shock, humor, special effects … View

Year 3 and More Improvements • Website Improvements (Web 2. 0 blog, tabs, wiki)

Year 3 and More Improvements • • Submission site at Research Channel Cyberwatch added as a partner Other efforts – advertising explored Youtube Channel (Marketing)

Poster Option! • New for year 3 • General security awareness or specific topic • Original artwork by students for broad student audience • Same prize money as a video contest • Great for students who don’t have resources to produce a video

Four Categories • Gold ($1000), Silver ($800), and Bronze ($400) awarded for each category. – Posters – Training videos – Public Service Announcement (30 sec) – Combined

Case Studies • Purdue • Cal Poly Pomona

Purdue Case Study • Strong focus on presenting live events for October National Cyber Security Awareness Month • Incorporate student video contest winners where it makes sense • Focus on staff members in first year, successive years have attempted to bring in students and faculty

Purdue Case Study • Themes for each year – 2008 – 2007 – 2006 “Modern Data Security In Five Acts”

Purdue Case Study • Presenters for events have been Purdue experts on information security – Strong partnerships with both staff member subject matter experts and Purdue faculty subject matter experts • Industry experts • Higher administration support for events

Purdue Case Study • Training & Outreach Coordinator responsible for gathering speakers. • Whole staff involvement in logistics. • Event attendance encouraged as “in status” training for employees. • Marketed to University community and local community • Local press attention

Purdue Case Study • We don’t forget to add the fun! – Security themed “door prizes” at each presentation – Mood music in the presentation hall – “Trick or Treat” bags with security flyers and swag for all participants at closing session – Annual Security Halloween Costume Contest

Purdue Case Study

Purdue Case Study • Promotion of video contest in conjunction with events. • Information about contest sent to student organizations and faculty members in disciplines that may have an interest.

Purdue Case Study Student Quiz with prizes. 66 students Completed the quiz with over 1/3 scoring 100%

Purdue Case Study Partnered with Housing Food Services to create and distribute a series of computer security posters to place in residence halls

Purdue Case Study Placed advertisements In the student newspaper

Purdue Case Study Create a security ambassador group Security ambassadors are the individuals in your organization who are willing to evangelize security awareness and directly influence behavior change. Purdue utilizes Security Officers throughout our decentralized IT organization. 48

Purdue Case Study • Policies and Procedures – Fighting security violators requires that you develop policies and procedures. – The first step in any security plan is to instill an awareness of the vulnerability in all users of computer systems. – If your organization does not employ security experts, bring in an outside consultant. – Be prepared to respond to the consultant's recommendations, but keep in mind that even with the best of consultants, a security breach is inevitable. – Your organization should be prepared to respond to a security attack. 49

Purdue Case Study Keep your messages short and simple: Short, clear messages are easier to retain. Keep in mind that message retention comes from a continuous, sustaining program, so repetition is a must. 50

Student newspaper advertisements September 19 th. These are also used as bookmarks distributed in residence hall packets each year. 51

Purdue Case Study • Security brochures distributed to incoming Freshman and transfer students at day on campus • Copyright bookmarks and security brochures distributed in residence hall goody bag: over 15, 000 distributed every year 54

Published in Student newspaper before February, and March events. 55

Published in Student newspaper in March and April 56

Secure. Purdue Newsletter published quarterly with timely articles 57

Case Study : Cal Poly Pomona • VP wanted winner from Cal Poly • A workshop for video production offered • Marketing – Department chairs, Faculty, Polycentric, Cyberfair • Partnership with CIS (National Center of Excellence), Studio 6 – production capabilities

Case Study: Cal Poly Pomona

Bob – You’ve Been Phished View

Panel Discussion • Professor Anna Carlin, Computer Information Systems, Cal Poly Pomona University • Michael Wong, KPMG, Former Cal Poly Pomona student

Panel: Questions for Carlin • How did you leverage the contest? • Do you have any thoughts on how to encourage student participation? • What resources would you suggest be available to assist students with this project? • Do you have any suggestions to help other faculty incorporate the contest into their curriculum? • How are the videos being used at Cal Poly Pomona? • How did the contest effectively promote teaching and learning? • How well was the contest received?

Panel: Questions for Wong • What made you and your friends enter the contest? • Why did you select phishing for your subject matter? • What challenges did you encounter? • What did you learn from the contest in general? • Did entering the contest positively improve your level of security awareness? • Since graduating, how do you think your involvement (and subsequent winning) benefit you to this day?

Panel Discussion • Open questions from audience

Thank You! View