The Center for Education and Research in Information Assurance and Security (CERIAS)
The Center for Education and Research inInformation Assurance and Security (CERIAS)
This second version of its kind can be completed online.
The CERIAS K-12 Outreach Program is committed to helping K-12 school systems increase the security of their information systems and in integrating information security into existing school curriculum. As part of our efforts, CERIAS has received a grant from the Indiana Higher Education Telecommunications System (IHETS) to develop educational multimedia for K-12 educators.
CERIAS announces the beta launch of a new service for managing vulnerabilities and patches. Elisa (Enterprise-Level Information Security and Assurance) is free and is starting beta testing at:
https://cirdb.cerias.purdue.edu/elisa_beta
Purdue University will offer several short courses in information security aimed at community members who wish to protect their computer systems from cyber-attack.
Eugene Spafford, director of CERIAS, has been selected to be a member of a committee that will advise President George W. Bush on information technology matters.
Accenture has just released the Security Call to Action and Executive Summary, from the 15 security experts who participated in the CERIAS Security Vision Roundtable.
Cassandra is a tool made to manage profiles of services and applications on servers and networks. With these profiles, it searches a local copy of NIST’s ICAT database for vulnerabilities. Searches can be automated to run every night, and to email the results.
Because users may not want a list of vulnerabilities, relevant to their systems, to be sent in clear text email, there is the option of only getting a notification that new vulnerabilities have been found. With an SSL connection, a list can be retrieved from the Cassandra web site.
Cassandra can also do searches by time intervals, keywords, and for products that are not yet in the ICAT database. This provides you with a reasonable assurance that you will get notified if a new vulnerability is found in a product that is not yet listed by ICAT.
The Center for Education and Research in Information Assurance and Security (CERIAS) gratefully acknowledges the contributions of its sponsors, and NIST for classifying CVE and CAN entries into ICAT and making the full ICAT database available to CERIAS.
Cassandra is available from https://cassandra.cerias.purdue.edu/
