M. E. Kabay, PhD, CISSP-ISSMP

A NOTE ABOUT NARRATED LECTURES:

Narrated PowerPoint files (PPTX = PowerPoint 2007 & PPT = PowerPoint 2003 and earlier) on this Website are usually compressed using WinZIP to save download time; open with WinZIP or compatible software and run the PPT or PPS or PPSX (self-starting PowerPoint Show) files as slide shows with sound enabled. You can download PowerPoint Viewer 2007 software for Windows from Microsoft free to see any version of PowerPoint files.

DIRECTORY TO THE WEB SITE:

Click here for a list of brief descriptions of each section of the Web site and a link to a narrated PowerPoint show explaining what's where.

CURRENT TEACHING / OFFICE HOURS      PDF

CURRENT COURSE LINKS:

IS102      IS240     IS342      IS406B

_____________________________________________________________________

LATEST FILE UPDATES:

Political Action Blog: links to articles, sites, petitions and events to prompt political action.

2009-12-04 Republican "Special Employees of Insurance Industry" Committee Sends Fund-Raising Lies to Physicians
2009-11-23 Subject: Egyptian Officials Bar Israeli Doctors from "International" Conference on Breast Cancer
2009-11-20 Challenging the Anti-Abortion Zealots
2009-11-11 Challenge Rupert Murdoch
2009-08-19 Racists at Fox "News" Must be Stopped
2009-08-18 Women's Health for Sale: Oppose Anti-Abortion Fanatics -- Support CHOICE
2008-08-17 Progressive Magazine needs Money NOW!
2009-08-11 US Conservatives' Opposition to Sex Education Has Predictable Results
2009-06-28: ACLU challenges legality of patenting human genes
2009-06 12: Human Rights Campaign Establishes Web Site to Oppose Lies of the Extreme Right about LGBT People
2009-05-27: Fighting Intelligent Design Propaganda
2009-05-06: Protect Yellowstone's Newborn Buffalo
2009-04-24: Establish a Commission to Investigate US Torture and Hold Health Professionals Accountable; Investigate Illegal NSA Wiretapping
2009-04-23: Support the Fraud Enforcement and Recovery Act
2009-04-22: Demand a Special Prosecutor for Torture
2009-04-21: Natural Resources Defense Council issues

______________________________________________________________________

September 2009:

Protecting Your Reputation in Cyberspace    PDF. This paper looks at how we can use e-mail and other electronic communications responsibly and professionally. It is intended to provide useful information for corporate INFOSEC awareness programs.

August 2009:

Waving the Red Flag: Rules for Reducing Identity Theft     PDF.    Commentary on the Notice of Proposed Rulemaking for banks and other financial institutions for Red Flag guidelines against identity theft.

Documentation for Less Work: Will this Have to be Done Again?      PDF.      Thoughts on keeping records of our work.

Preparing for the Next Solar Max:         PDF.      The next cycle of solar storms seems to be causing concern among astrophysicists and critical infrastructure specialists. Get ready for trouble.

June 2009:

Understanding Computer Crime Studies and Statistics v6:         PDF      HTML      Why one should be careful not to over-interpret published surveys and studies of crimes, especially computers crimes; and how to make sense of sampling, sample sizes, confidence intervals and contingency tables. Updated December 2008 with new material on confounded variables and in June 2009 with minor updates.

Non-narrated lecture notes on Making Sense of Statistics in Information Security presented at ISSA Hartford, CT on June 16, 2009.   PPT      PDF

Non-narrated lecture notes on Legal Aspects of Investigating & Prosecuting Computer Crimes presented at 6th Annual MSIA Graduate Security Conference in a workshop on June 10, 2009.       PPT      PDF

Workshop on Intellectual Property Law -- 13th Colloquium on Information Systems Security Education: Bootcamp on Sunday 31 May 2009. Designed for teachers as an overview of issues and a collection of resources and slides for free use in noncommercial teaching.
      PPT      PDF

May 2009:

DOJ --  Searching and Seizing Computers and Obtaining Electronic Evidence in Criminal Investigations (July 2002)       Index added May 2009        PDF

Pepys into the Corridors of Power: Deciding how long a student should speak, university-style.   HTML            PDF

System Logging -- Written for the MSIA 2.0 program's Seminar 1, Week 6, this commentary, subtitled "I'm a Lumberjack and I'm OK: System Logging," is not a Monty Python skit.     HTML     PDF

April 2009:

IA Specialists Need to Communicate: Guide and Checklist for Expository Writing -- In explaining to our information assurance (IA) graduate students why they end up writing around 100,000 words of expository writing by the time they finish our 18-month master’s program,< http://infoassurance.norwich.edu/ > we (instructors and staff) always insist on the practical value of fluent writing. Being able to respond quickly and effectively to requests from colleagues and supervisors asking for clarification of new policies or of requests for additional resources obviously makes obvious sense; in adHdition, being able to respond succinctly and diplomatically to angry customers (we teach our students to think of everyone depending on them as customers) can have long-term benefits to the organization and to the individual.    HTML       PDF

Parkerian Hexad -- This narrated PowerPoint file (PPT) from the MSIA program introduces the concepts of the Parkerian Hexad -- the six fundamental atomic, non-overlapping attributes of information that we protect in information assurance. The Hexad is replacing the Classic Triad (Confidentiality - Integrity - Availability) as the foundation of IA theory. Also availble as a PowerPoint Show (PPSX) that starts by itself in PowerPoint.      PPT      PPSX        (in 25 MB ZIP archives)

March 2009:

US DoD Annual Estimates of Information Warfare Capabilities and Commitment of the PRC 2002-2009 -- The Annual Report to Congress on the Military Power of the People's Republic of China from the US Department of Defense has been issued every year since 2002. Reading through all the reports from 2002 through 2009 provides valuable perspective on the DoD view of Chinese information warfare capabilities. The following is a simple compilation of extracts from the Annual Reports bearing on information warfare capabilities and commitment of the PRC and the PLA, including specific commentary about industrial espionage sponsored by agencies in the PRC.     PDF

Frequently Corrected Errors -- I’ve been editing technical writing since 1970 and notice that some errors keep popping up in many writers’ papers. I’ve been collecting the comments I make about these errors and hope that you will find some of them helpful. Several colleagues have contributed suggestions that I have gratefully incorporated and acknowledged in the file. Version 6 was updated in March 2009.      PDF

Introduction to Database Management System Administration & Security -- a 90-slide overview of security aspects of DBMS theory and practice. Created for MSIA GI512, the new Seminar 1 starting in June 2009.

• Part 1: Overview of Database Theory
  
• Part 2: Administration & Concurrency Control
• Part 3: ACID Transactions
  
• Part 4: DB Security & Resource Management

Narrated PPTX file in ZIP (16 MB)

Narrated PPT file in ZIP (23 MB)

Non-narrated PPTX file (6 MB)

Script as PDF (350 KB)

February 2009:

Computer-Aided Consensus(TM) -- CAC -- is a useful extension of brainstorming and the Delphi Technique for exploring and analyzing project priorities, resource estimates, and any other discussion topics in groups. Narrated PPT file (in ZIP) available along with PDF and MP3 versions.

On Writing v9: new material about top-down writing.       PDF       HTML

January 2009:

Electronic Crime Scene Investigation: A Guide for First Responders, Second Edition: a Review      PDF      The National Institute of Justice has issued its second edition of this classic guide. Read the review and download the document. It is required reading for all information assurance professionals who could have contact with a crime scene involving computers and networks.

The End of Passwords     PDF      Why I hate passwords as a method for authentication.

Why Study Crimes?     PDF     What are the issues raised by virus-writing and hacking courses? This essay, based on columns I wrote for Network World Security Strategies, was used in the MSIA program.

Using E-mail Safely and Well (v2):      HTML       PDF      Compilation of several short papers published from 1995 through 2007; updated and reformatted January 2009.

December 2008:

Computer Security Handbook, 5th Edition front matter, table of contents for every chapter and index as PDF. Bosworth, Sy, M. E. Kabay & E. Whyne (2009), eds. Wiley. ISBN 978-0-471-71652-5. 2044 pp. Two volumes. Index. (Publication date February 2009).