🚀 go-pugleaf

This month's meeting:

  Bill Yang will talk about secure remote access to email using ssh
  tunneling. 

  ABSTRACT:

  In today's anti-spam-relaying and packet-filtering environment,
  roving users are difficult to manage -- it seems like every one of
  them wants an exception to be made to the local security policy
  because "e-mail is a vital business resource."  When senior
  management -- who do not want to understand the technical
  implications of relaxing security restrictions -- are among the
  roving users, some solution needs to be put into place to resolve
  their needs without making systems unreasonably vulnerable.

  Using the Secure Shell (SSH) tunneling protocol, it is possible to
  permit authenticated access to e-mail and news following a one-time
  configuration of standard mail and news clients, with only minimal
  re-education of users.  This can resolve many of the security risks
  associated with "open" access to the Internet messaging services
  (password sniffing, exploits against vulnerable services, and
  weak authentication  protections) with packet filtering and the
  addition of application-level encryption in an almost completely
  transparent manner.

  This presentation will include demonstrations of free and commercial
  SSH tunneling packages for modern Windows platforms in combination with
  host-level security measures on UNIX (Solaris), protecting Internet
  messaging protocols including IMAP, POP, SMTP, and NNTP.

  Mowgli Assor will also be on hand to answer questions, and possibly
  give a surprise demo.

Speaker Bios

  William Yang is the lead techno-babbler of the Greater Columbus
  Free-Net, a community outreach project of the Ohio State University
  and the Ohio Supercomputer Center, providing Internet and community
  information services at no charge to residents of central Ohio.  As
  a techno-babbler, Bill does system, security, and local/wide-area
  network administration as well as programming, documentation, economic
  development, staff management, business planning, consulting, public
  speaking, and course instruction.  Despite the confusion about what
  his job is really all about, Bill's last network security research
  project ("Using Internet Standards to Control the Cost of Spam,"
  which was initially presented to the OSU security community last
  summer) made him one of the top-rated presenters at SANS'98 in
  Monterey.

  Mowgli Assor didn't give me a bio, so I get to make up something
  about him.  Mowgli works in the UTS network security group (aka the
  OSU incident response team), where he consults with people from
  around campus about security planning and incident response.  

When and Where

  The location is same as usual - Baker Systems 120.  If you need
  directions, let me know.

  The meeting will be on August 26 from 4-6 PM.

About these meetings:

  The Network Security Group meetings are usually held on the fourth
  Wednesday of each month from 4-6 PM on the Ohio State University
  main campus in Columbus (usually in Baker Systems 120).  The goal of
  our meetings is to share information about computer security tools,
  practices and problems.  Anyone and everyone are invited to attend.

  We also have mailing lists for people who are interested in
  discussing network security issues, or who just want announcements
  about meetings and security bulletins.  Send mail to
  romig@net.ohio-state.edu for more information.

  Note that this is *not* the same as the bi-weekly security lunch at
  Battelle (the AEGIS group), though you are welcome to attend
  either.  For me information about AEGIS, please contact me.

--- Steve