October 25 Slide 1

1
Planning Discussion for Spring Secure Remote
Access Initiative

• Mike Corn
• Director, Security Services and Information
  Privacy

2
Overview

• Remote Access versus Mobile Access
• Home Access
• Mobile Access
• International Access (a.k.a., really remote
  access)
• Vision for Remote Computing

3
Remote Access versus Mobile Access

• Remote Access Not on campus
• Mobile Access Not at desk
• Home Access
• Mobile Access
• International Access

4
Home Access

• Need to support home networks
• How much can CITES support?
• Recommended hardware software support (Help
  Desk)
• Marketing of support
• How much can units support?
• Unit specific issues (e.g., local VPN, file
  shares)
• Marketing of support
• Home visits?
• Dont forget cost recovery services!
• OnSite Service http//onsite.cites.uiuc.edu/
• Liability concerns
• Many unknowns - being researched w/Legal Counsel

5
Mobile Access

• Laptops
• PDA Class Devices (Treo, Blackberry, Smartphones)
• iPods Class Devices

Security Security Security!!!
6
Laptops I

• Remote Mobile Connectivity
• Data Mobility, i.e., whats on your laptop?
• QuickConnect VPN
• http// web pages (for example, the UIUC home
  page)
• https// web pages (for example, the CITES
  Express Email web interface)
• CITES NetFiles (including both the web interface
  and WebDAV clients)
• Illinois Compass and other CITES Educational
  Technologies courseware
• Certain Instant Messaging clients (for example,
  AIM and MSN Messenger)
• Secure protocols such as SSH, SFTP, and secure
  POP/IMAP.
• Printing (through printers which allow
  QuickConnect connections)
• Ftp update of antivirus (new)
• Native VPN support under testing
• Existing resources http//www.cites.uiuc.edu/secu
  rity/scenarios/

7
Laptops II - Data Mobility

• Educational Opportunity
• Intellectual Property
• Loss of Research Data
• Confidential Student Data
• What to do about encryption? Cant be ignored any
  more
• Encrypted Drives
• Encrypted Images / Directories
• Who manages keys or passwords?
• Should we push or wait for demand for support?

8
PDA Class Devices iPods

• There doesnt seem to be any demand
• How do we support devices we dont own or
  control?
• Antivirus
• Secure connectivity
• Data encryption
• Higher rate of lost devices

9
Really Remote Access (International)

• Kiosks
• Remote Desktop
• Laptops
• Mobile Technologies

10
Vision for Remote / Mobile Computing

• Requires collaboration CITES Units Help Desks
• Develop a technical users community that will
  stay abreast of products
• Identify a small body of supported devices
• Laptops and (someday) Treo 650, Blackberry,
  Smartphones
• Identify a small body of recommended home
  networking devices
• Pool expertise of what people are using now
• CITES can provide home for documentation and
  other resources
• Address liability for home visits / support
• Market as Data Security / Privacy issue

11
Possible Activities

• Users group keeps up to date on home networking
  equipment
• CITES mines information for FAQs and web based
  documentation
• CITES maintains test / lab versions of
  recommended hardware
• Shared home networking hardware documentation for
  units to customize
• Host Spring Remote Access Fair?