Security for Libraries (SEC4LIB)

[Peter Noerr]

Include me in as well. As a vendor/service provider we would probably come in for our share of "testing", but that would be a benefit for all at the end of the day.

It would also be beneficial to post the original notification to code4lib as well. Not all interested people there are on web4lib.
And contact NISO about this (www.niso.org) , they would be interested in keeping a watching eye on such a focused activity.

Peter

Dr Peter Noerr
CTO, MuseGlobal
http://www.museglobal.com/



From: Web technologies in libraries [mailto:WEB4LIB at LISTSERV.ND.EDU] On Behalf Of Erin Germ
Sent: Thursday, May 03, 2012 12:10 PM
To: WEB4LIB at LISTSERV.ND.EDU
Subject: [WEB4LIB] Security for Libraries (SEC4LIB)

I thought I would extend this to the WEB4LIB listserv.

Would anyone be interested in forming an informal SEC4LIB discussion group. This would be an informal group to discuss and investigate existing security features and shortcomings of library services and applications. This would essentially include documenting and pen-testing library applications and services.

As background, I'm finishing a second Masters in Cybersecurity and have been "investigating" various library software and services. I've been do white-hat investigating on library software and services for about a year and reporting discoveries to vendors and sites. My goal is to bring attention to the security aspect of library software and services while working with vendors/providers to secure their products, services, applications, and solution. If your interested in the same, please contact me.

V/R

Erin Germ
============================

To unsubscribe: http://bit.ly/web4lib

Web4Lib Web Site: http://web4lib.org/

2012-05-03
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listserv.nd.edu/pipermail/web4lib/attachments/20120503/2623564b/attachment.htm>