Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Endpoint //


10:30 AM
Connect Directly
E-Mail vvv

6 Best Practices for Managing an Online Educational Infrastructure

Universities must keep pace with rapidly changing technology to help thwart malicious hacking attempts and protect student information.

Retailers, healthcare providers, and social media platforms may be the first organizations that come to mind regarding consumer data security. However, other organizations — including institutions of higher education — are also tasked with the responsibility of protecting their customers' sensitive and valuable personal information from cybercriminals.  

Because increasing numbers of students opt for some level of distance learning, today's institutions of higher education are collecting vast amounts of virtual data. And as in any industry, universities must keep pace with rapidly changing technology to help thwart malicious hacking attempts and protect student information. 

This is especially important for universities that serve primarily nontraditional students — for example, adults taking online classes. To improve validation of the student population, universities collect and store information ranging from physical addresses, email addresses, Social Security numbers, birth dates, and more. Protecting all of this data warrants a cybersecurity strategy that exceeds students' expectations for a quality learning experience that extends further than typical security.

We have experienced protecting all of this data first hand at University of Phoenix. Last year, the university taught approximately 123,900 students, the majority of which were working adults who primarily took their classes online. These students may live states or even countries away and must trust their information with an institution they may have never physically seen or visited.

While the basic principles of security create the foundation for an efficient experience, protecting data can be the unseen — and often unnoticed — component of a satisfactory college experience. A conscientious balancing act comes into play when the quality that a student sees and experiences — namely, availability, and accessibility — are considered. Personally identifiable information (that is, information to identify and contact a student) must be accessible for the student to review and update at all times but simultaneously remain secure from unauthorized access and unintended use. Any information that identifies a person (for example, a photo, name, or email address) is considered sensitive data and should be handled as such.

This creates a delicate balance between accessibility and security. To reach this equilibrium, the network must be resilient and self-healing to provide availability to students where and when it is needed. When it comes to managing an online security infrastructure for an educational institution, here are six important cybersecurity components to keep in mind.

1. Create a Hierarchy When Logging Data
Security logging of systems, applications, and network devices is critical when investigating suspicious activity, from attacks to user activity. With tens or even hundreds of thousands of students enrolled in online courses at any given time, the number of logs that are generated at an online institution can become daunting. Based on the amount of security an organization has to have for its system, a balance must be struck between generating loads of logs and analyzing the most important data. It’s important to focus on the logs that are most likely to give you data and information that could reveal suspicious or fraudulent activity.

2. Establish a Risk Baseline for Network Monitoring
A risk baseline must be established so analysts can differentiate between normal and suspicious activity on the network. Establishing what is normal, ordinary, and healthy behavior on the network is crucial, making it easy to flag any excessive or exceptional behavior and quickly understand if there is a current threat of or an actual cyberattack.

3. Integrate Effective Identity Management Solutions
Identity management should provide a pleasant user experience while protecting sensitive student information. Identity management is a constant balance between security and convenience. An organization could have the most secure network in the world, but it will not be used if it is too difficult to access. The best solution is multifactor authentication, to prove a valid user by password, using a coded token, or through a fingerprint or an iris scan. The most secure systems require all three of these elements and accomplish the goal of establishing the user without making the process too onerous.

4. Involve Students in Communication and Training
A security awareness program must be well communicated to keep students informed about attacks targeting people (phishing, for example). This typically takes the form of an annual training program that users must complete so that organizations have a record and a confirmation of users understanding the security basics, including but not limited to phishing, passwords, etc. When users have accounts that are safe, the organization has fewer ways for hackers to enter its system.

5. Layer Your Defense for Optimal Protection
Defense should be in layers because no single solution can defend against everything. Each layer must be appropriate for the data and systems it's protecting. Different kinds of cyberattacks need different solutions. Multiple layers of defense provide varied solutions. It also is important to communicate with the Community Emergency Response Team (CERT) and all security vendors. This will provide the most up-to-date information and alert professionals to bigger attacks that may be happening across the nation and worldwide.

6. Expect Failure — and Have a Backup
Systems sometimes fail, which requires a documented and tested incident-handling process to meet and exceed minimum recovery time objectives. It seems like common sense, but when systems fail, an organization needs to have a backup plan. For example, if a server goes down, there should be a plan in place to take care of users. This should include overall instructions, what information they are able to access, and the recovery time on fixing the system. In some cases, there may be a need to have secondary equipment available for use and alternate ways to access data servers.

Related Content:

Jamie Smith is the Chief Information Officer for University of Phoenix. Smith holds a Bachelor of Arts in Business Administration from Iowa State University and has served as a board member for Junior Achievement and the Memphis IT Council. Larry Schwarberg is the Chief ... View Full Bio

Recommended Reading:

Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
User Rank: Apprentice
7/16/2020 | 9:24:15 AM
Re: Spread it wide
The current situation in the world is direct evidence that the unexpected can happen all of a sudden, and it is advisable to be prepared for this. Therefore, I believe that the educational system should have been practicing online mode for a long time. And also considering the fact that for a long time already popular e-readers for students, which many of us are very fond of, a direct confirmation of this. You can find out more details on the website https://www.igeekphone.com/best-e-readers-for-students/ from a beautiful article, in my opinion. You must admit that this is much more convenient than carrying heavy and dusty books with you. And what do you think, maybe you have something to add about this? I would be interested to know your opinion.
User Rank: Moderator
1/22/2019 | 2:55:07 AM
Spread it wide
I like knowing that all this information in storage is becoming more accessible. I think that there are a lot of people in this world who actually have so much potential, if only they were able to gain access to such materials and tools to increase their knowledge on various topics. This is just a stepping stone...
User Rank: Strategist
1/22/2019 | 1:16:50 AM
Evolve with technology
Educational institutions should apply the same level of security onto their systems like those of establishments within other industries regardless of their different backgrounds. Though the data that they mainly carry does not contain highly sensitive info like finances and medical, but confidential data still needs to be protected nonetheless. Any lapses cannot be tolerated in today's rapidly evolving technological era.
Ransomware Is Not the Problem
Adam Shostack, Consultant, Entrepreneur, Technologist, Game Designer,  6/9/2021
How Can I Test the Security of My Home-Office Employees' Routers?
John Bock, Senior Research Scientist,  6/7/2021
New Ransomware Group Claiming Connection to REvil Gang Surfaces
Jai Vijayan, Contributing Writer,  6/10/2021
Register for Dark Reading Newsletters
White Papers
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: Google's new See No Evil policy......
Current Issue
The State of Cybersecurity Incident Response
In this report learn how enterprises are building their incident response teams and processes, how they research potential compromises, how they respond to new breaches, and what tools and processes they use to remediate problems and improve their cyber defenses for the future.
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
PUBLISHED: 2021-06-18
RIOT-OS 2021.01 before commit 44741ff99f7a71df45420635b238b9c22093647a contains a buffer overflow which could allow attackers to obtain sensitive information.
PUBLISHED: 2021-06-18
SerenityOS contains a buffer overflow in the set_range test in TestBitmap which could allow attackers to obtain sensitive information.
PUBLISHED: 2021-06-18
SerenityOS in test-crypto.cpp contains a stack buffer overflow which could allow attackers to obtain sensitive information.
PUBLISHED: 2021-06-18
SerenityOS before commit 3844e8569689dd476064a0759d704bc64fb3ca2c contains a directory traversal vulnerability in tar/unzip that may lead to command execution or privilege escalation.
PUBLISHED: 2021-06-18
RIOT-OS 2021.01 before commit 85da504d2dc30188b89f44c3276fc5a25b31251f contains a buffer overflow which could allow attackers to obtain sensitive information.