Ontwikkelingen in het

onderwijs

Eduard Beck & Martin Diepeveen

31 maart 2016

Studenten brengen steeds vaker hun eigen devices mee. Ze studeren niet alleen met laptops, maar ook met tablets en smartphones. Bestuurders en medewerkers gebruiken bovendien ook steeds vaker mobile devices. Hierbij is de beschikbaarheid versus de beveiliging voor de IT-afdeling een serieuze uitdaging.

Mogelijke beschermende maatregelenSuite Technologie Voorbeelden van bescherming

SURF/SLB Basispakket Data Loss Prevention: Bescherming tegen (on)bewust lekken van gevoelige data

In-place hold: Bescherming tegen opzettelijk vernietigen van data

Windows Bitlocker: Bescherming bij verlies/diefstal van data door encryptie

Exchange Online Protection: Bescherming tegen veel soorten spam en bekende virussen

Office 365 RMS: Bescherming tegen ongeoorloofd toegang tot gevoelige data binnen Office 365 o.a. door encryptie

EMS (aanbieding via SURF/SLB)

Azure Active Directory Premium:

Bescherming tegen verlies van wachtwoord d.m.v. multi-factor authentication Rapportage en inzicht op ongeoorloofd toegang

Microsoft Intune: Bescherming en encryptie van data op mobiele apparaten

Azure RMS: Bescherming tegen ongeoorloofd toegang tot gevoelige data (in de cloud en lokaal)o.a. door encryptie

Office 365 E5 (beschikbaar)

Advanced Threat Protection (voor Office 365 en Exchange Online Protection):

Bescherming tegen zero-day virussen in mail (beschermt o.a. tegen malware) Realtime bescherming onveilige links in mail (beschermt o.a. tegen phishing) Rapportage op effecten van onveilige links (geeft inzicht in of er een datalek is

ontstaan en hoeveel)

Advanced eDiscovery: Snel rapportage en inzicht in onrechtmatig handelen en datalekken

Customer lock-box: Regulering van geautorisseerde toegang van de databewerker tot gevoelige data

Enterprise Mobility Suite

Microsoft IntuneMicrosoft Azure Active

Directory PremiumMicrosoft Azure Rights Management Premium

Advanced Threat Analytics

Easily manage identities

across on-premises and cloud

Single sign-on and self-service

for corporate resources

Leverage MDM and MAM to

protect corporate apps and

data on almost any device

Encryption, identity, and

authorization to secure

corporate files and email across

phones, tablets, and PCs

Identify suspicious activities

and advanced threats in near

real time with simple,

actionable reporting

Behavior-based

threat analytics

Information

protection

Identity and access

management

Mobile device and

app management

Identity-drivensecurity

Comprehensive solution

Managed mobile productivity

EMPOWER ENTERPRISE MOBILITY

IDENTITY-DRIVEN SECURITY

Self-service capabilities

• Password reset

• Group membership

• MyApps portal

Manage everything

• Dynamic groups

• Provisioning

• B2B collaboration

Single sign-on

• Easy connection to existing assets

• Unified experience across user devices

IDENTITY-DRIVEN SECURITY

Guard apps

• Conditional access

• Secure remote access

Intelligent analysis

• Machine learning

• Security reports

• User behavior analysis

Protect users

• Multi-factor authentication

• Leaked credentials reporting

Identity-drivensecurity

Comprehensive solution

Managed mobile productivity

EMPOWER ENTERPRISE MOBILITY

MANAGED MOBILE PRODUCTIVITY

• Conditional access

• Compliance enforcement

• Multi-identity support

Access management

• Mobile app management (w & w/o a device enrollment)

• File and data encryption

Built-in security

• Office mobile apps

• Familiar and trusted

Goldstandard

MANAGED MOBILE PRODUCTIVITY

Integrated use

• Works across all platforms

• Free content consumption

• Consistent user experience

• Integrate into common apps and services

Persistent protection

• Storage-independent

• Permit all companies to authenticate

• Enforce authorization policies

Tracking and compliance

• Powerful logging and reporting

• Use/abuse tracking

• Kill documents remotely

• IT can reason over data

MANAGED MOBILE PRODUCTIVITY

Centralized, secure data

• No local access or storage

• Apps and data stay in the cloud

No app rewriting

• Deliver apps as is

• O365 integration

• Simplified updates

Simplified scaling

• Scale to seasonal need

• Cloud flexibility

• File and data encryption

Identity-drivensecurity

Comprehensive solution

Managed mobile productivity

EMPOWER ENTERPRISE MOBILITY

Always

up to date

• Real-time updates

• Keep up with new apps and devices

Works with

what you have

• Support multiple platforms

• Use existing investments

Simple to set

up and connect

• Easy, secure connections

• Simplified management

COMPREHENSIVE SOLUTION

EMPOWER ENTERPRISE MOBILITY

Identity-based security for

greater control and visibility.

Identity-drivensecurity

Manage your mobile and

on-premises environment across

devices and operating systems.

Comprehensive solution

Encourage secure work habits

by providing the best apps

with built-in security.

Managed mobile productivity

Een niet te stoppen ontwikkeling, waarbij we nog maar aan het begin staan. Hoe is, op basis van de beschikbare data over het leerproces van de student, te voorspellen en te sturen op het uiteindelijke studiesucces? Ook vragen over privacy van gegevens spelen in deze ontwikkeling een belangrijke rol.

Vision analytics

Recommendation

engines

Advertising

analysis

Weather

forecasting for

business planning

Social network

analysis

Legal

discovery and

document

archiving

Pricing analysis

Fraud

detection

Churn

analysis

Equipment

monitoring

Location-based

tracking and

services

Personalized

learning

Imagine what machine learning could do for

your institution

Equipment reliability

Graduation rates

School and

district

rankingsPersonalized

learning

MOOC

completions

Heating and A/C optimization

Enabling at-risk and

disabled students

Endowments

Book store salesStudent achievement

Bullying prevention

Teacher

effectiveness

Student enrollment and

retention

Parking

optimization

Cafeteria

improvements

Marketing

effectiveness

Stuck?

Potential tutor?

Bored?-05k

05k

15k

25k

35k

0

50

100

150

20

11

-02-0

1

20

11

-02-0

2

20

11

-02-0

3

20

11

-02-0

4

20

11

-02-0

5

20

11

-02-0

6

20

11

-02-0

7 En

erg

y P

oin

ts E

arn

ed

Tim

e S

pen

t (M

inu

tes) Student Detailed View

Exercise Minutes Video Minutes Energy Points

Assessment of Student’s Content Knowledge and

Clear Presentation Skills

Measures the student’s understanding of lessons through

homework and test scores as well as the student’s ability

to express herself or himself during class participation.

Computation of Student Assessment Data

Inputs assessments into a prediction model to identify

which students possess adequate knowledge of teaching

materials and ability to explain those concepts. The

model also identifies struggling students who need more

help.

Detailed Status Report of Each Student in Each

Lesson over Time

Reports knowledge level and activity completion of

students over time. System also enables instructors to

receive feedback on lesson effectiveness.

Student Lesson 1 Lesson 2 Lesson 3 Lesson 4 Lesson 5 Lesson 6

Cindy

Ravi

David

Zach

Bill

Dylan

Student Status

Azure MLStudent

classification

Student data Prediction

0

2

4

6

Category 1 Category 2 Category 3 Category 4

Customer All Customers

Identify

best tutors

and

struggling

students

Assess knowledge and ability Predict future achievement Track progress

At-Risk Student Statistics

Classroom and Online Interaction Data for Individual

Students

Collects and tracks how often each student attends class

in person, how each performs based on grades, and how

much each participates in the class’ online discussions.

Any student can be individually selected for further

details.

Dropout Threat Predictor

Predicts which students are at high risk of dropping out

of school based on either sudden changes in

performance or consistent signs of struggle. A machine

learning algorithm is used to classify students by risk

level: Low, Medium, and High.

Aggregation of Risk Throughout Education System

Sums up and generalizes the number of at-risk students

at the classroom, school, and district level. System

enables administrators to measure effectiveness of policy

changes in school system.

Student “Dylan” Summary

Track current performance Predict dropout probability Aggregate and act

StudentHours in

class

Comments

onlineLogons

Dylan 0 15 3

David 6

Bill 10 70 5

Cindy 12 4 6

Zach 6 3 8

Online

Classroom

Social media

Databases

User interface

0

20

40

60

80

100

1 1,5 2 2,5 3 3,5 4

Performance

At-Risk Score

(5)

Risk

Level

Intervention

Recommended

4.2 High Risk Yes

0%

2%

4%

6%

8%

10%

Class School District

Low Risk Medium Risk

High Risk Average

Student “William” Performance Learning Disability Predicted Occurrence

Learning Disability Challenges

13 percent of all student in the United States received

some form of special education service in 2012.1

Identifying students with learning disabilities is a major

challenge in education.

Over one-third of parents say their child’s school

inadequately tests for learning disabilities.2

Learning Disability Indicator

Assess likelihood of student having undiagnosed

learning disabilities based on data. Recommend further

actions for teacher based on predictions and provide

concrete data to support discussions with parents.

19 percent of students with learning disabilities drop

out of high school.2

Summary Statistics at class, school, and district level

Aggregate predictions and statistics can help identify

outliers in class performance and achievement, aiding in

evaluation of policy effectiveness. Aggregate statistics can

also help identify prevalence of underlying causes of

underperformance.

Student William Learning

Disability Predictor

Assess student performance Predict learning disability View in aggregate

40

60

80

100

Q1 Q2 Q3 Q4

Reading Writing Math

• In-class assignments

• Tests

• Online

• Inventory assessments

0%

20%

40%

60%

80%

ADHD Reading Writing Math

Learning

Disability

Predicted

Likelihood

Recommended

Next Step

Reading

(Dyslexia)67%

Dyslexia

Assessment

0%

1%

2%

3%

4%

5%

6%

7%

8%

Class School District

ADHD Reading Writing Math

High likelihood of

reading disability

Higher predicted percentage

of math disability in class

predicted

1) National Center for Education Statistics

2) National Center for learning disabilities

PowerBI/dashboardsMobile appsWeb apps

Data Scientist

HDInsight

Azure Storage

Training set,

on-premises

Azure Machine Learning

Studio and the data scientist:

• Access and prepare data.

• Create, test, and train models.

• Collaborate.

• Stage for production via the API

service (with one click).

Azure Preview portal and Azure

Machine Learning API service and the Azure ops team:

• Create the ML workspace.

• Assign storage account(s).

• Monitor ML consumption.

• See alerts when models are ready.

• Deploy models as web services.

Azure Machine Learning API service and the developer

• Tested models are available as URLs that can be called from any end point.

De beweging naar de cloud is binnen onderwijsinstellingen reeds gemaakt. Ook de 4 leveranciers maken stappen naar de cloud. Wat is hun visie en hoe zit het met de beveiliging van gegevens en systemen? Hoe zorgt u als instelling voor regie over en tussen al die clouddiensten?

Applications

Clients

Infrastructure

Management

Databases &

Middleware

App Frameworks

& Tools

DevOps

PaaS &

DevOps

Azure Site Recovery: Protect VMWare and Physical Servers

in Public Preview

Azure Backup Generally Available

Azure API Management Premium simplifies high availability and

massive scale for APIs

ExpressRoute for Office 365

Azure Active Directory Dynamic Membership For Groups

Automatic Password Change for Social Media Shared Accounts

Compute-Intensive A10 and A11 Virtual Machine Instances

Remote Desktop app for Windows Phone support for Gateway

and Remote Resources

Informatica Cloud Agent availability in Linux and Windows Virtual

Machines

Azure DocumentDB Hadoop Connector

Azure HDInsight support for more VM sizes

Enterprise-Grade Array-Based Replication and Disaster Recovery

with ASR and System Center GA

Platform Services

Infrastructure Services

Web AppsInfrastructure

MobileBackends

APIManagement

API AppInfrastructure

Business ProcessAutomation

PushNotifications

Content DeliveryNetwork (CDN)

Live & ODMedia Streaming

B2BIntegration

HybridConnections

Pub/SubQueuing

SimpleQueuing

HybridOperations

Server DataBackup

Hybrid/IntelligentData Backup

DisasterRecovery

Bulk Data ImportAnd Export

RelationalSQL Database

DocumentDatabase Service

DistributedIn-MemoryCache

SearchSimpleKey/ValueStore

DataWarehouse

Directory Health Monitoring

PrivilegedIdentity Management

OperationalAnalytics

StatelessCompute

ScheduledCompute Jobs

Virtual AppStreaming

DistributedCompute

DevelopmentTools

ApplicationInstrumentation

Software DevelopmentKits

Software LifecycleManagement

Domain Join &Policy Management

Big DataAnalytics

PredictiveAnalytics

Data StreamAnalytics

Data Pipelines

Device DataCollection

MobileAnalytics

Big Data Storage

IoT DeviceManagement

Data SourceManagement

Security & Management

User/Group Directory Store

Multi-FactorAuthentication

Scheduled ServiceManagement

Service Creation& Configuration

Encryption KeyStore

Software/SolutionMarketplace

Pre-Build VMImages

Identity Sign-Up and sign-in

TaskScheduler

The Azure Platform Strategy

Public, Global, Shared DatacentersMicrosoft Azure Stack & Cloud Platform System

Secu

rity

&

Man

ag

em

en

t

SaaS(Software as a Service)O365, CRM, VSO etc…

+3rd Party SaaS Solutions

Public Cloud

Platform

Hyb

ridO

pera

tion

sSecu

rity

&

Man

ag

em

en

t

Hyb

ridO

pera

tion

s

A look inside Gartner Magic Quadrants…• Microsoft leads in core cloud

technologies, IaaS, PaaS, Private and Public Clouds

• Microsoft leads in 19 Gartner MQ’s (and a Visionary or Challenger in 17 others)

What do others say..?

Magic Quadrant forCloud Infrastructure as a Service Worldwide (May 2015)

*Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest

ratings. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties,

expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

Topic Area Magic Quadrant Last Release Microsoft Amazon

Application Development

Application Development Life Cycle

Management Feb-15 Leader

Business Applications Business Intelligence and Analytics Platforms Feb-15 Leader

Software Infrastructure Client Management Tools May-15 Leader

Software Infrastructure Cloud Infrastructure as a Service May-15 Leader Leader

Business Applications CRM Customer Engagement Center Apr-15 Leader

Software Infrastructure Data Warehouse Database Management Systems Feb-15 Leader Challenger

Software Infrastructure Enterprise Application Platform as a Service Mar-15 Leader

Business Applications Enterprise Content Management Oct-15 Leader

Software Infrastructure Horizontal Portals Sep-15 Leader

Application Development Integrated Software Quality Suites Aug-14 Leader

Software Infrastructure On-premises Application Integration Suites Jul-14 Leader

Software Infrastructure Operational Database Management Systems Oct-15 Leader Leader

Software Infrastructure Public Cloud Storage Services Jun-15 Leader Leader

Business Applications Sales Force Automation Jul-15 Leader

Software Infrastructure Secure Email Gateways Jun-15 Leader

Business Applications Social Software in the Workplace Oct-15 Leader

Communications Equipment Unified Communications Aug-15 Leader

Software Infrastructure Web Conferencing Dec-15 Leader

Software Infrastructure x86 Server Virtualization Infrastructure Jul-15 Leader

LEADER

Magic Quadrant forPublic Cloud Storage Services (June 2015)

Magic Quadrant forEnterprise Application Platform as a Service (March 2015)

Magic Quadrant forX86 Server Virtualization Infrastructure (July 2015)

Magic Quadrant forOperational Database Management Systems (Oct 2015)

LEADER LEADER LEADER LEADER

Magic Quadrant forBusiness Intelligence and Analytics Platforms (Feb 2015)

LEADER

Azure ComplianceThe largest compliance portfolio in the industry

HIPAA / HITECH

FedRAMP JAB P-ATO

FIPS 140-2 FERPA DISA Level 2 ITAR-readyCJIS21 CFRPart 11

IRS 1075 Section 508 VPAT

ISO 27001 PCI DSS Level 1SOC 1 Type 2 SOC 2 Type 2 ISO 27018Cloud Controls

Matrix

Content Delivery and

Security Association

Shared

Assessments

European Union

Model Clauses

United Kingdom

G-Cloud

Singapore

MTCS Level 3

Australian

Signals

Directorate

Japan

Financial Services

China Multi

Layer Protection

Scheme

China

CCCPPF

New

Zealand

GCIO

China

GB 18030

EU Safe

HarborENISA

IAF