Best Practices and Security Alerts

The following tips can be used to protect your computer system, and may help you from being quarantined while using Resnet. Be aware that in any case, your computer must meet the minimum security requirements. Failure to do so will result in your internet connection being disabled.

Security Updates

Security Updates fix flaws in operating systems that present security hazards to your computer system, and also to other network users. All modern operating systems have a method of providing critical security updates automatically through the internet. All that is left for you to do is to learn to use this functionality, and configure your computer to automatically update on a regular basis (Resnet suggests that checking for updates weekly should be sufficient).

Anti-virus and Definition Files

We strongly encourage you to install anti-virus software and update the definition files (files that help detect new viruses) frequently. Definition files can be set to update automatically or manually. However you decide to update your definition files, you will need to update them once a week in order to keep your anti-virus protection effective. Anti-virus software is a great method to protect your computer system.

We recommend Avast, AVG, Bit Defender, McAfee, or Norton. However, remember that any anti-virus software is better than none.

If you desire a free anti-virus product, we recommend using Avast. AVG and Bit Defender also offer a feature-limited free version.

Remember: if your computer is spreading viruses, your internet access will be disabled.

E-mail

E-mail is a source through which most viruses spread. A few simple precautions can help to protect your computer system from viruses:

• Use your GroupWise Mail as it is free and secure. Resnet, and all other campus departments, send announcements and other official mail to Resnet users via GroupWise.
• Avoid using Microsoft Outlook, as it has proven itself to be a major security risk on Windows-based machines.
  • If you must use Outlook, disable the 'preview pane', as this will prevent many malicious files from running automatically.
• Utilize an Internet email account that provides free virus scanning (most major providers such as Google, Yahoo, and Microsoft do this already).
• Never open emails containing attachments from people you do not know and trust. Do not open emails containing attachments unless you were expecting to recieve a file.
• Never respond to unsolicited mail.

Attachments

E-mail with file attachments is the most common method of virus infection, so it is especially important to be careful when opening these messages. Many times, a user does not even have to open the attachment itself in order to become infected, especially if they are using a mail client with known security holes, such as Microsoft Outlook.

When an icon indicating an attachment is next to a message, take the following precations:

• Look at the address of the sender. If this person is not a friend, family member, or someone with whom a business relationship does not already exist, delete the message. Alternatively, a message could be sent to the individual asking who they are, and what the attachment is.
• If an attachment was not expected, contact the sender before opening the message to confirm that they sent it to you.
  • Some viruses can use other's email accounts to send messages and a copy of the virus without the account owner's knowledge or consent.
• If unsure about what the attachment is, do not open it.
• Do not open attachments that are executable. These include files with the extentions:
  • .exe
  • .com
  • .vbs
  • .scr
  • .pif
  • And others. If unsure, use a resource such as google to find out what type of file it is before opening it.

Firewalls

A firewall is a device which creates a barrier to network traffic, separating a network into a trusted zone and an untrusted zone. A firewall is designed to allow traffic from the untrusted zone to enter the trusted zone only in certain circumstances. This protects computers in the trusted zone from:

• Hackers
• Worms (Viruses)
• Other users with malicious intent

Most modern operating systems include a built-in firewall. However, in order to work properly on Resnet, the firewall on your computer must be configured properly.

Passwords

Passwords are the most important links in the chain of computer defense. Unfortunately, passwords, and the need for strong passwords, are the things most often breezed over by users, or ignored outright. After all, once an individual has installed a firewall, anti-virus and anti-spyware products, secured their email, and backed up their data; they simply don't have the energy to remember a strong, secure password. Right?

Unfortunately, as internet citizens, we do not have the right to insecure passwords. If weak passwords are used, the consequences are innumerable.

Spyware

Spyware is software that is installed surreptitiously onto a computer. 'Spyware' is a general term, and is not limited only to software which performs espionage. Spyware can be installed through security holes in a system, through websites, or even by piggybacking with legitimate software. Spyware is without question the largest security threat on Resnet.