[IS&T Security-FYI] SFYI Newsletter, May 7, 2012

[Monique Yeaton]

In this issue:


1. New MIT Secure Wireless SSL Certificates May Prompt Users to Trust

2. Applied Cyber Security Course at MIT

3. MIT News: Thwarting the Cleverest Attacks



--------------------------------------------------------------------------------------------

1. New MIT Secure Wireless SSL Certificates May Prompt Users to Trust

--------------------------------------------------------------------------------------------


Last week Friday, May 4, IS&T installed new SSL/TLS certificates on the wireless RADIUS servers. MIT's certificate provider has changed from Equifax to GeoTrust.


As a result of this change, users of the MIT SECURE and MIT SECURE N wireless networks may be prompted to trust the new certificates. Users concerned that they are being presented with an illegitimate certificate can compare its fingerprint with those of the legitimate certificates listed in the Knowledge Base<http://kb.mit.edu/confluence/x/YwBABw'>.



---------------------------------------------------

2. Applied Cyber Security Course at MIT

---------------------------------------------------


NEW COURSE FOR 2012 - Date: June 25-26, 2012 | Tuition: $1,800 | Continuing Education Units (CEUs): 1.6


The course covers securing computers, applications, networks, digital forensics, and the ethical and legal practices affecting all computer users. The course also covers the strategies, implementation, and management of a business information continuity plan; mitigation of cyber vulnerabilities; and incident response and analysis. The content is targeted at ensuring the privacy, reliability, and integrity of information systems.


Learn more<http://web.mit.edu/professional/short-programs/courses/applied_cyber_security.html>.



----------------------------------------------------------

3. MIT News: Thwarting the Cleverest Attacks

----------------------------------------------------------


Researchers at MIT have worked on a general approach to mitigating side-channel attacks on computers. At the Association for Computing Machinery’s Symposium on Theory of Computing (STOC) in May, researchers Shafi Goldwasser, the RSA Professor of Electrical Engineering and Computer Science at MIT, and her colleagues will present a paper demonstrating how the technique she developed with her former student Guy Rothblum can be adapted to protect information processed on web servers.


In addition to preventing attacks on private information, Goldwasser says, the technique could also protect devices that use proprietary algorithms so that they can’t be reverse-engineered by pirates or market competitors — an application that she, Rothblum and others described at last year’s AsiaCrypt conference.


Read the full article<http://web.mit.edu/newsoffice/2012/thwarting-eavesdropping-data-0501.html>.



===================================================================================

Read all Security FYI Newsletter articles and submit comments online at http://securityfyi.wordpress.com/.

===================================================================================


Monique Yeaton
IT Security Communications Consultant
MIT Information Services & Technology (IS&T)
(617) 253-2715
http://ist.mit.edu/security


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/ist-security-fyi/attachments/20120507/af502f87/attachment.htm