Securing on-demand education
As the university environment benefits from its recent expansion beyond the campus, these institutions need a cybersecurity model that recognizes that a threat can come from anywhere. The Zero Trust model responds to these challenges by adopting the approach of “trust nobody”— inside or outside the network, making sure that no user has access to data that they don’t depend on for their day-to-day functions. The goal is to restrict access as much as possible and ensure that you have visibility into all your users, traffic, data, and workloads, and that you have uniform security policies applied across all locations to make sure that no security loopholes exist.
Under Zero Trust, which has taken root as a foundational element of modern cybersecurity, cybersecurity strategies are redesigned to follow a set of key principles:
- Creating network micro-segments and micro-perimeters to restrict traffic flow within the network and limit excessive user privileges and access as much as possible.
- Strengthening incident detection and response using comprehensive analytics and automation.
- Providing comprehensive and centralized visibility into users, devices, data, the network, and workflows.
To preserve the growing number of learning platforms and resources accessible online, it is essential to secure them against HTTP and web application-based security flaws. Web application firewall systems use specific knowledge of HTTP and web-application vulnerabilities to filter or block these attacks without ever exposing the web servers or applications. This helps protect the environment against a host of attacks and is a must-have for modern educational institutions.
Automated Distributed Denial-of-Service (DDoS) protection is another critical step in protecting against widespread and easily launched DDoS attacks. Universities should leverage DDoS threat intelligence, combined with real-time threat detection, to defend against DDoS attacks no matter where they originate. Methods such as automated signature extraction and black-listing botnets’ IP addresses and available vulnerable servers create effective, proactive defenses.
Integrated Security Approach
Over the years, most organizations have amassed several legacy-based security point solutions, which address specific threats. These systems – added incrementally as new threats emerge and new approaches are provided – create an increasingly complex system, adding latency into applications and reducing the overall effectiveness of the business’ cybersecurity strategy.
Universities should look towards an integrated approach that consolidates cybersecurity functions as much as possible, in turn allowing these functions to work together seamlessly for unified security and enabling compliance.
While the shift to remote and on-demand learning accelerated by the COVID-19 pandemic, the transformation of higher education had already been well underway. Finance and enrollment operations were already driving universities away from on-premises systems, offering more dynamic options for students to interact with the establishment, regardless of whether they were on-site or not.
But with the exponential growth of online resources in the last two years, the evolution in business models is now clear. What remains is to ensure that universities’ technology stack can support the new direction, maintain availability wherever and however students connect, and ensure the security of its students and employees alike.
Terry Young is Director, Service Provider Marketing, at A10 Networks. She is responsible for developing programs and marketing materials that describe the business value of A10 solutions for mobile network operators and other service providers. Young has more than 20 years’ experience in the telecommunications industry, including at AT&T (mobile and fixed businesses), where she developed market strategy recommendations for new business initiatives for AT&T. As a principal analyst for a syndicated market research company early in the 3G technology introduction, her 3G/4G market analysis and forecasts were published by the UMTS Forum. Young previously held positions with several start-up mobile infrastructure and software vendors, including Infoblox and Palo Alto Networks. She has an MBA from Arizona State University.
- 5 leadership priorities to become AI-ready - October 9, 2026
- Learner agency comes first in AI-driven digital literacy - October 7, 2026
- Authority, responsibility, and accountability for AI in higher ed - October 5, 2026