Technology Solutions Centre - IT Security

Practice Safe Computing

Tips on how to minimize the risk to yourself and others when computing on campus or elsewhere:

Protect Your System

1.  Keep your operating system updated - Whether you have Windows, Linux, Mac or UNIX, there are patches available to close known vulnerabilities.  Go to the vendor's website and get your system patched and updated.  Do this regularly.

2.  Get Anti virus software - Viruses, worms and trojans spread through many venues - network, E-Mail, Instant Messaging, hostile web sites.  Get it, install it, customize it, maintain it.  Make sure it is updated with the latest pattern files and scan your system regularly for malware.

3.  Get a personal firewall - Stop network-based hacks by installing a personal firewall.  Many of the newer Anti virus packages come with them.  Customize the firewall software to block everything coming into your system that you don't initiate.

4.  Customize the programs you install on your system - An express or default install does not necessarily mean a secure install.  Chose a custom install for programs and configure it in a way that  is more secure.

5.  Learn and understand the programs you use - Being a "power user" of a program will help you to understand its strengths and weaknesses.  By knowing this, you can make added provisions that will protect you and your data.

6.  Keep your system locked away - Always make sure your office or room is locked when leaving for long periods.  If you have a laptop, stash it somewhere out of sight or take it with you when you go.  Don't fall prey to theft.

7.  Don't let others use your system - If you use your computer for work or study, then its a tool - an important tool.  Letting a friend, child or relative access your system can only spell trouble, especially if they know more about computing than you do!

Protect Your Data

1.  Save your work frequently - Something you've spent hours creating could come to a sudden end if your system lost power or the program you use experienced a crash.  Many programs have auto-save features.  Learn how to customize this feature to minimize loss of work.

2.  Backup your data - Everyone on campus has a personal network drive allocated to them - use it!  Copy any important files you have on your system to it for redundancy.  For added protection, save all data you create to your personal network drive.  Make copies on diskette, CDROM or a personal USB device and store these off site or in a secured area.  Keep your archives updated.

3.  Keep your system clean - Remove any old or unused programs.  Delete any old personal files you may have saved.  Empty your recycling bin / trash folder, E-Mail attachments, temporary Internet files, and "cookies".  Customize your programs to clean up after themselves, like old E-Mail and web browser cache files.

Protect Your Privacy

1.  Never share out your account - Your computer account is your identity.  Sharing your account is no different than handing your house keys to a stranger - anything can happen, and often always does!  Remember that you are responsible for your computer/network account and whatever activities are generated by that account.

2.  Use different passwords for different accounts - If one of your accounts becomes compromised, you can minimize the exposure to other accounts by having unique passwords for each one.

3.  Use a strong password - Don't settle for a password that is easily guessable.  Chose a password that is at least six alpha-numeric characters and change it often.  Make it easy enough for you to remember, but if you have to write it down, make sure you keep it in a safe place - don't paste it to your monitor or keyboard!

4.  Chose secure options when accessing online services - When accessing network or Internet services where you must enter personal or confidential information (password, account info), make sure you select secure methods.  Use Secure Shell (SSH) rather than Telnet or FTP and Secure HTTP (HTTPS) for web-based transactions.

Trust No One!

1.  Always question E-Mail from organizations requesting personal information - E-Mail coming from banks or online services requesting account information that is not personalized (directed to you) should be deleted.  Never fill out forms in E-Mail and always access the online service by manually typing the url in your web browser.

2.  Always suspect notices telling you to delete files on your system - Most of the time its a hoax.  Never delete files from your local system unless you know exactly what they do.

3.  Never install software from an unknown website or company - Software you download for free often has Spyware and Adware embedded in them.  Programs requiring you to register may sell your name to spammers or other ad companies.  Nowadays, the term "free" has many hidden hooks!

4.  Never assume the media you receive is free of viruses - Scan all media (diskette, CDROM, USB) before using the data on them.