Meeting Notes

Attendees:

• Nathan Heck, ITNS
• Jeff Hopkins, ITNS
• Pacal Meunier, CERIAS
• Greg Hedrick, ITNS
• Bill Harshbarger, ITNS
• Doug Couch, ITNS
• Brett Lawson, VPBS
• Preston Wiley, CERIS
• Keith Watson, CERIAS

Presentation:

Keith Watson introduced the Twenty Critical Controls for Cyber Defense in his presentation.

Discussion Points:

1. We discussed the meeting time and agreed to continue with the current arrangement: the second Thursday of each month from 11:30-1pm.

2. We discussed the organization of the group. We will investigate the possibility of forming a university recognized employee-based "club."

3. Pascal Meunier will present the updated Common Weaknesses and Exposures (CWE) list of top twenty-five most dangerous programming errors at the February meeting.

4. Members of the ITNS group will present information regarding IDS data for Purdue at the March meeting.

Action Items

1. Greg Hedrick will investigate a larger intrusion detection meeting or workshop for the Purdue community. We may also investigate holding a larger meeting and invite other institutions to participate.

2. Greg Hedrick, Nathan Heck, and Doug Couch will provide scripts and/or libraries to Keith Watson for PDF certification generation. This will be used to generate PDFs of certificate for CPE evidence.

3. Members are asked to look into forming a employee-based "club" that can be recognized by the university. Please ask other members of the Purdue community how this can be accomplished.