The ISO collaborates with the campus community to protect Carnegie Mellon from and to respond to threats to our electronic information resources and computing and networking infrastructure.
On June 2-3, 2009, the ISO sponsored a two day course entitled "Web Application Security Essentials", conducted by Dr. Johannes Ullirch, Ph.D. of the SANS Institute. This course is designed to help in understanding the fundamentals behind Web vulnerabilities, which enabled the attendees to properly defend their organization's Web assets. Mitigation strategies from an infrastructure, architecture and coding perspective were discussed alongside real-world implementations that really work.
Last Fall the Carnegie Mellon Information Security Office and the CyLab Usable Privacy and Security Laboratory conducted a study to help us learn how to better protect the Carnegie Mellon community from identity theft.