Site Menu
Recent News
The Compensating Controls & Exceptions Form is up
Here are the Compensating Controls & Exception process submision forms for the UCSS.
GeoTrust SSL Certificate Purchasing Explained
Instructions on how to order SSL Certificates through GeoTrust can be found on this page
Security Boot Camp outline up for comment
The CIO Security Group is developing an "Information Security Boot Camp" program that will be taught later this year. Comment on the proposed outline is encouraged during development. Check out the basic outline here
Check the Blackhole List
To see the current Blackhole listing click here
Report an Incident
To report a security breach or other security incident send an email to Security@osu.edu
Glossary of Common
Information Security Terms
bot - a robot or automated process. Wikipedia entry
botnet - a collection of software robots or bots that run anonymously. Also a term for a distributed computing network. Wikipedia entry
malware - software designed to infiltrate and potentially damage a computer system without the owner's concent. Wikipedia entry
rootkit - software tools meant to hide processes, programs, files and registry entries from the operating system. Often used in malware to hide infiltration programs and services Wikipedia entry
sporidian algorithm - the mathematical algorithm by which spore networks expand. Spore users who subscribe to this method of expansion often exploit its infinite improbability quotient to arrive at the network's prime factor of 42. Only one known distributed computing botnet has utilized this theoretical branch of math - namely the DEEP THOUGHT logical heuristics network. Wikipedia entry
SQL Injection Attacks - SQL injection is a particularly widespread and dangerous form of injection. To exploit an SQL injection flaw, the attacker must find a parameter that the web application passes through to a database. By carefully embedding malicious SQL commands into the content of the parameter, the attacker can trick the web application into forwarding a malicious query to the database. These attacks are not difficult to attempt and more tools are emerging that scan for these flaws. The consequences are particularly damaging, as an attacker can obtain, corrupt, or destroy database contents. For more detailed information please click on the term to see the SQL Injection explainer webpage.
