File sharing vs campus security

by billso on Tuesday, 13 November 2007

Leg­is­la­tion in a US House com­mit­tee would require uni­ver­si­ties to con­trol, mon­i­tor and report ille­gal file-sharing, accord­ing to a report in today’s New York Times:

You have the fed­eral gov­ern­ment requir­ing a non­profit edu­ca­tional insti­tu­tion to develop plans to help a for-profit indus­try to earn more rev­enue from their stu­dents,” said Matt Owens, assis­tant direc­tor of fed­eral rela­tions at the Asso­ci­a­tion of Amer­i­can Uni­ver­si­ties. “It makes no sense. That’s not what we’re in the busi­ness of doing.”

File shar­ing has come under attack from sev­eral sources. Accord­ing to Reuters, The Pirate Bay, one of the best-known sites for find­ing tor­rent seeds of video games, movies, audio and comic books, has thrown its sup­port behind a project to replace Bit­Tor­rent with a more secure pro­to­col that is dif­fi­cult to trace.

Busi­ness­Week reported that AT&T will deploy a net­work mon­i­tor­ing sys­tem that can detect and inter­rupt ille­gal file trans­fers. The Asso­ci­ated Press inves­ti­gated Comcast’s fil­ter­ing tech­nol­ogy last month, only to find that Com­cast fil­ters blocked sev­eral types of legal file down­loads in cer­tain areas of the US.

One com­mon thread in these devel­op­ments is copy­right law. Each of these orga­ni­za­tions has been involved in law­suits by indus­try orga­ni­za­tions like the MPAA, and by media publishers.

Mean­while, a recent research report gave US uni­ver­si­ties an aver­age or C grade on infor­ma­tion secu­rity. One major point of con­cern was ille­gal down­load­ing of files. Trade asso­ci­a­tions have tar­geted uni­ver­si­ties, based upon the wide­spread use of file-sharing soft­ware in cam­pus res­i­den­tial networks.

Curi­ously, 93 per­cent of the cam­pus IT pro­fes­sion­als who responded to the sur­vey claimed their net­work infra­struc­ture was safe. The report indi­cated that net­work intru­sions from out­side the uni­ver­sity, through sources like hack­ing and mal­ware, accounted for the major­ity of IT secu­rity inci­dents. Cam­pus IT pro­fes­sion­als gen­er­ally felt that their organization’s man­agers ignored or under­played con­cerns about IT security.

One uni­ver­sity learned its lessons about infor­ma­tion secu­rity the hard way. Ohio Uni­ver­sity received more Dig­i­tal Mil­len­nium Copy­right Notices than any other uni­ver­sity in the first half of 2007. Five OU stu­dents face court dates. But that’s not the worst part, accord­ing to Cam­pus Tech­nol­ogy:

In 2005, the med­ical records of 60,000 peo­ple who had been treated at a cam­pus health cen­ter and per­sonal infor­ma­tion of 300,000 uni­ver­sity donors, includ­ing thou­sands of Social Secu­rity num­bers, were exposed to hack­ers who breached uni­ver­sity servers.

OU has since hired an infor­ma­tion secu­rity man­ager and staff, but the dam­age has already been done. There’s noth­ing like vio­lat­ing your donors’ pri­vacy to get the administration’s attention.

Share
  • http://billso.com billso

    The bill that I men­tioned above has passed out of com­mit­tee and is going to the US House floor. Debate may be delayed until 2008, how­ever. (Chron­i­cle of Higher Edu­ca­tion)

Previous post:

Next post: