CERT
 
Publications CatalogHistorical Documents CSIRT Development Information CMU Master of Information Systems Management CMU Heinz School SEI Public Courses SEI Credentials Program Link to US-CERT cylab FIRST
 

Security and Information Assurance: Announcements

September 15, 2007: The NSF Regional Center for System Security and Information Assurance (CSSIA) has mapped the SIA Curriculum to the national standards set by the Committee on National Security Systems (CNSS) for Information Systems Security (INFOSEC) Professionals (NSTISSI 4011) (pdf) and System Administrators (SA) (CNSSI 4013, entry level) (pdf). The curriculum meets approximately 95% of the objectives.


March 21, 2007: The podcast A New Look at the Business of IT Education discusses the issue that IT training courses need to provide system administrators with both technical and business skills.


October 24, 2006: The SIA Curriculum was presented at the League for Innovation in Community Colleges 2006 Conference on Information Technology held at the Charlotte Conference Center.


September 29, 2006: Version 3.2 of the Survivability and Information Assurance Curriculum has been released. See the News, Notes, and Changes document for the set of changes.


September 18, 2006: [Faculty] There is a newer version of Webmin.
The URL is: http://prdownloads.sourceforge.net/webadmin/webmin-1.300-1.noarch.rpm and the MD5 checksum is:
b408964def818d3138dfda61f14260b7
Note that older versions, including version 1.230 that is referenced in the current documentation, works properly.


September 15, 2006: The SIA Curriculum was described in the news@sei on-line publication.


September 13, 2006: Further analysis of the capabilities of VMware Player has shown that this product does not have enough of the features of VMware Workstation to make it a viable candidate for use in the SIA Curriculum. We will continue to monitor VMware Player's capabilities with respect to its features and its usability in the SIA Curriculum. In the meantime, we know that VMware Workstation does have the necessary functionality and we recommend that it be used in the SIA Curriculum.


June 30, 2006: The SIA Curriculum was presented at the 18th Annual FIRST Conference held at the Renaissance Harborplace Hotel in Baltimore, MD.


June 28, 2006: [Faculty] The Red Hat 9 distribution URL locations have changed.
Use an Internet search engine to locate the required files using the search strings specified below. Verify the downloaded files using the MD5 checksums.
	Search String:	shrike-i386-disc1.iso
	MD5 checksum:	400c7fb292c73b793fb722532abd09ad

	Search string:	shrike-i386-disc2.iso
	MD5 checksum:	6b8ba42f56b397d536826c78c9679c0a

	Search string:  shrike-i386-disc3.iso
        MD5 checksum:   af38ac4316ba20df2dec5f990913396d


June 28, 2006: [Faculty] The Red Hat 9 standard patch URL locations have changed.
Use an Internet search engine to locate a site that contains the following path name: 9/en/os/i686. Here are some of the files that should appear in that directory along with their MD5 checksums.
      File Name                               MD5 Checksum
  glibc-2.3.2-27.9.7.i686.rpm           b1311b31b1e2f349aaef5bba91be3caa
  kernel-2.4.20-31.9.i686.rpm           b9ff44df6f8950ae64febda7b6afa9c1
  kernel-smp-2.4.20-31.9.i686.rpm       df5e314e867757b8f420c17def224d56
  openssl-0.9.7a-20.2.i686.rpm          e39bbb9c8235f9b6584eb8472f68a68c
When a site has been located, all of the standard patch files are available at 9/en/os. Retrieve all of the files and folders beginning at that path. For example, one site that contains the original 9/en/os/i686 is http://update.swelltech.com/updates/9/en/os/i686/. All of the patches are available at http://update.swelltech.com/updates/9/en/os/ in the subfolders i386, i586, i686, and noarch.


June 28, 2006: [Faculty] The Ethereal Network Protocol Analyzer has changed its name to Wireshark
URL: http://www.wireshark.org Note that Ethereal is still available at http://www.ethereal.com/. The functionality and capabilities of Wireshark appear the same as those of Ethereal. Development appears to be continuing under the Wireshark name.


June 22, 2006: The SIA Curriculum was presented at the 7th Annual IEEE Information Assurance Workshop at the U.S. Military Academy in West Point, NY.


June 7, 2006: SIA Curriculum Receives "Best Paper" Award at CISSE 10.
On June 7, 2006, the paper entitled "The CERT (R) Survivability and Information Assurance Curriculum: Education for First Defenders", written by Lawrence R. Rogers, chief architect and designer of the SIA Curriculum, received the Best Paper Award at the 10th Colloquium for Information Systems Security Education.


March 22, 2006: The SIA Curriculum was presented at SecureIT 2006.
On March 22, 2006, The Survivability and Information Assurance (SIA) Curriculum was presented at SecureIT 2006.


February 16, 2006: [Faculty] VMware (for Linux) virtual machines
The VMware-based virtual machines provided with the Supplemental Lab Materials were built and known to work under VMware Version 4.5.2 for Linux. We have learned that these virtual machines also work under VMware Version 5.5.1 for Linux. They need only be converted by the VMware application by selecting the Upgrade Virtual Machine option from the VM pull-down menu.

Please note that the screen captures shown in Guided Tours and Demonstration provided with Version 3.1 of the SIA Curriculum will change when using VMware Version 5.5.1 for Linux. However since both Version 4.5.2 and 5.5.1 provide comparable functionality, these Guided Tours and Demonstrations are still philosophically correct in that they provide the correct set of steps to follow to achieve the goals of the Guided Tour and Demonstration.


Last updated: March 21, 2007