|
Division of IT: Security
Make IT Safe: Best Practices
Update software
Keeping software updated is critical to safe computing. Updates often fix security vulnerabilities.
- Check for updates to anti-virus applications and critical updates for the operating system and programs weekly. Many vendors provide automatic mechanisms for online software updates.
- MU provides anti-virus software available at the software distribution site.
- Division of IT proactively scans systems connected to the MU network for vulnerabilities. If outdated software is causing a problem, the computer may have to be disconnected from the network.
Don't share too much
- If a computer or application is set to allow file sharing, ensure that proper authentication is required.
- Only turn on services such as file sharing, printer sharing, FTP, SMTP (e-mail), HTTP (Web), or remote login if they need to be used.
- If there is a constant connection to the Internet, such as TigerNet, DSL, or cable modem, consider purchasing personal firewall software as an added line of defense against unwanted network access.
Be cautious with e-mail
Problem e-mail can range from annoying to threatening and can violate several laws and institutional or department policy.
- Be cool. Do not reply; replies often bring more abusive e-mail. Do not delete or archive problem e-mail (at least not immediately). If problems continue, each note might provide an essential clue or bit of evidence.
- Be quick. Report any problem e-mail as soon as possible. System logs that help trace messages may be retained for only a few days. Though an incident might appear minor, it may be part of a larger pattern of abuse.
- Be skeptical. E-mail addresses are easily forged. Do not trust an e-mail with messages like "Class is canceled," "Change your password to xxxxx" and "Make money fast." Except for reporting to authorities, do not forward "chain" letters or dire warnings of viruses or disasters.
- To protect a computer from viruses, do not open attachments, click on links from unknown sources, or forward chain letters.
- Spam can include advertisements, solicitations, and junk mail. Division of IT encourages reporting spam.
- Off-topic or inappropriate postings to discussion lists should be brought to the attention of the list owner. Insults, "flames", and offensive language may violate the sender's service agreement with his or her Internet Service Provider (ISP), particularly if the ISP is a school or employer. Persistent abusive communication might qualify as harassment and should be reported.
Don't become a risk
- Be sure to use encryption when submitting credit card numbers or other sensitive data over the Internet.
- Don't choose the option to save a password when accessing a Web page.
- Don't use a PawPrint and password on external entities such as personal e-mail, online shopping Web sites, instant messaging, etc.
- Ensure that anti-virus software is installed and maintained to avoid being infected by or spreading viruses.
- Keep backup copies of data. Equipment or software can crash and destroy data, as can a virus or intruder.
- Have a "Plan B" for word processing, printing, e-mail, or any other important function. Power failures and equipment failures happen.
- Tampering with computers or networks, trespassing or providing copyrighted materials without authorization violates federal laws, state laws, University policy, and/or University contracts. These can result in loss of network access, confiscation of equipment, expulsion, fines, or jail. Read and abide by the Acceptable Use Policy to ensure safety.
|
