Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Hacking Higher Education
Newest First  |  Oldest First  |  Threaded View
royjason123
royjason123,
User Rank: Apprentice
2/4/2020 | 4:34:19 AM
Career Guide
Nevertheless, questions still remain on the relation between learning strategies, motivation, and performance. The vast majority of previous research has adopted some form of grades (be it single grades or grade point average) or self-report measures as outcome variables.
RuskinF
RuskinF,
User Rank: Apprentice
1/9/2020 | 7:21:43 AM
re: Hacking Higher Education
Thanks for the post. Our university also arranges penetration testing competitions to find out the vulnerability of their systems. These competitions allow younger adults to test their skills as well.
REISEN1955
REISEN1955,
User Rank: Ninja
8/2/2019 | 1:33:01 PM
re: Hacking Higher Education
Advertisement not really good here and besides the service is a disaster - and I speak as a systems professional who is in Cyber security and has done support for offices, small businesses and home-office users.  I would never go to Geek Squad. 

And all the replies seem to be the same basic idea!!!   Hmmmmmmm
tdsan
tdsan,
User Rank: Ninja
7/19/2019 | 5:47:49 PM
Identified the problem, now what is the fix
I do agree with the most recent commenter, thank you for sharing. But now that we understand the problem, how do we resolve the issue so it does not happen again.
  • Do we purchase cameras so we see who is going in and out of the various buildings
  • Do we purchase software to help us detect devices on the network that are out of the norm
  • Do we perform audits of the network and inventory the environment so issues are caught ahead of time (is there a program in place that does it every 6 months)
  • Is there an educational program to train the students and teachers about the use of the network and approved usage

However, removing the students is somewhat harsh, I do think this is a real-world attack and their exploit can be used by the other departments, don't kill their dreams, but have them work with the Cybersecurity teams to demonstrate real-world examples. Punish them but have them teach how a hacker thinks, there is a psychological evaluation that could help the students find ways to address real-world attacks (this is a perfect example). Put them on probabation but send them to the psychological evaluation unit where they can be evaluated and studied. This helps everyone understand how the mind works so you can combat the problem, if you have never been a hacker, then how do you know what to look for in order to defend against a potential theat (there was a movie called "To understand the mind of a killer" or "How to get away with murder", well why not do the samething but do it in a classroom setting.

Just a thought.

Todd
LynnL703
LynnL703,
User Rank: Apprentice
2/26/2018 | 1:47:20 AM
Re: Interesting Post
 Thank you so much for sharing this article.  
BrianN060
BrianN060,
User Rank: Ninja
2/17/2018 | 6:27:01 PM
Flag comments?
Does DR have a way to flag inappropriate comment posts?  If not, suggest you add one.  
PJS880
PJS880,
User Rank: Ninja
6/16/2013 | 3:24:00 PM
re: Hacking Higher Education
I have worked on the
IT security team where I attend school, and they have several measures set up
for intrusion detection and penetration testing. Universities must keep up to date with threats
they are facing, by hiring third party red teams to try and penetrate their
systems. Not to mention these are
younger adults and maybe think they can us what they are learning and misuse it
for they own personal gains. At the very least Universities are more aware of
the threats they face so that they can better prepare for them.

Paul Sprague

InformationWeek Contributor


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Black Hat USA 2022 Attendee Report
Black Hat attendees are not sleeping well. Between concerns about attacks against cloud services, ransomware, and the growing risks to the global supply chain, these security pros have a lot to be worried about. Read our 2022 report to hear what they're concerned about now.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-37452
PUBLISHED: 2022-08-07
Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set.
CVE-2022-26979
PUBLISHED: 2022-08-06
Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a NULL pointer dereference when this.Span is used for oState of Collab.addStateModel, because this.Span.text can be NULL.
CVE-2022-27944
PUBLISHED: 2022-08-06
Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow an exportXFAData NULL pointer dereference.
CVE-2022-2688
PUBLISHED: 2022-08-06
A vulnerability was found in SourceCodester Expense Management System. It has been rated as critical. This issue affects the function fetch_report_credit of the file report.php of the component POST Parameter Handler. The manipulation of the argument from/to leads to sql injection. The attack may be...
CVE-2022-2689
PUBLISHED: 2022-08-06
A vulnerability classified as problematic has been found in SourceCodester Wedding Hall Booking System. Affected is an unknown function of the file /whbs/?page=contact_us of the component Contact Page. The manipulation of the argument Message leads to cross site scripting. It is possible to launch t...