69传媒

At Winston Churchill High School in Montgomery County, Md., students were accused of stealing computer passwords and tampering with grades. In Orange County, Calif., a student at Tesoro High School went on trial for hacking into the student database and changing his and several other students鈥� grades. At Haddonfield Memorial High School in New Jersey, two students were charged with using keystroke-recording software to gain access to passwords that allowed them to break into secure areas of the school鈥檚 computer system.

鈥�69传媒 are very, very tech-savvy. Far more savvy than the majority of adults at our school,鈥� says Michael Wilson, the principal of the 775-student Haddonfield Memorial High.

The students at his school were stopped by an observant teacher, who noticed suspicious activity and soon discovered the students were logging in as teachers, says Wilson.

鈥淭eachers and all staff at the school need to be diligent鈥� in keeping tabs on students, he says. Parents, too, can help by monitoring what their children access on the Internet, Wilson says.

鈥淚t鈥檚 important for teachers and students to have good, open communication,鈥� he says. 鈥淎nd from a principal鈥檚 perspective, I really try to have a close working relationship with the tech guys.鈥�

After the incident at Haddonfield, John Miller, the director of technology at the school, says he helped beef up network security by making it more obvious whether the person logged in is a teacher or a student. That way, teachers can tell by glancing at the screen whether a student is logged in as a student or teacher, he says.

In addition, he activated a feature that shows teachers the last time they logged in each time they access certain parts of the network so they can verify whether their accounts have been tampered with.

鈥淭here are more features just to make teachers more aware of what鈥檚 going on on the network,鈥� Miller says.

Uniquely Vulnerable?

According to a survey of 1,000 New York City teenagers by the Burlington, Mass.-based cyber-security company , half the students reported having had their Facebook or e-mail accounts hacked, and 16 percent admitted to trying their own hand at hacking.

Only 15 percent of those surveyed said they had been caught or knew someone who had been caught hacking.

School systems are uniquely vulnerable to hacking, says James E. Culbert, an information-security analyst for the 135,000-student Duval County schools in Jacksonville, Fla.

鈥淚n the case of our school system, we鈥檝e got 135,000 [potential] hackers within our district, inside of our same network that houses our student-information systems and HR systems,鈥� he says.

There are key steps, though, that districts can take to help secure information and protect school networks, says Culbert.

In his district, for instance, the student network is separate from the network that teachers and administrators access, he says.

Culbert also makes sure that all new employees are educated about the 鈥渁cceptable use鈥� policy in the district and what students are and aren鈥檛 allowed to do on school computers.

Finally, Culbert travels to a middle or high school in the district roughly once a week and runs reports on the content filter to see which students have tried to access inappropriate material. He then sits down with the top five to 10 worst offenders and talks with them about the consequences of violating the acceptable-use policy.

鈥淭hat way, when the teachers tell the kids that we are monitoring the activity that goes on, they believe it,鈥� he says.

Preventing Cyber Mischief

One essential tactic in preventing cyber mischief, says Culbert, is making sure that all students and teachers have to log in before they can access the network.

鈥淧eople tend to behave better when their actions aren鈥檛 anonymous,鈥� he says.

Educating teachers, students, and parents about the consequences of tampering with school networks is the first step to protecting school data, says Harold R. Rowe, the associate superintendent for technology and school services at the 100,000-student Cypress-Fairbanks Independent School District in Houston.

Emphasizing digital citizenship and ensuring strong authentication measures and passwords are the most important ways to prevent threats, says Rowe, who also sits on the advisory board for the Cyber Security for the Digital District Leadership initiative of the , an ed-tech advocacy group based in Washington.

In addition, administrators need to be consistent and upfront about the consequences for violators, says Rowe.

Talia Colwell, a security specialist for the Vernon Hills, Ill.-based technology company , says it鈥檚 important for schools to treat their acceptable-use policies as living, breathing documents. The policies should be updated to reflect the latest technological developments, and students and faculty members should be familiar with those changes.

鈥淪ecurity threats are increasingly growing across the board, both internal and external threats,鈥� says Colwell. 鈥淚t is definitely top of mind from a day-to-day perspective.鈥�

Enabling firewalls鈥攚hich are integrated into most computers and just need to be activated鈥攁nd making sure all computers have up-to-date virus software and security patches are easy, low-cost solutions that go a long way to protect school networks, she says.

And the content filters that schools have in place to comply with the Children鈥檚 Internet Protection Act, or CIPA, can help prevent students from accessing information about hacking.

鈥淎t the end of the day, it truly goes back to the basics of end-users,鈥� Colwell says.