Desktop Security

Prevention is the best protection against computer vulnerabilities.

As a member of the UNM computing community, it is your responsibility to help keep computing resources safe and available for use.

Workstation & Data Security
OS & Software Updates
Malware & Phishing
Firewall
Backup
Copyright
Resources

Watch IT Security Basics presentation by Mike Burlison and Erica Gallegos, Security Days, October 2007

Workstation & Data Security

Back to Top

OS & Software Updates

Be sure to get all available critical updates and security patches for your operating system. Remember that an Internet connection is required, whether the automatic check feature is enabled or you manually check for updates.

Windows XP operating systems include an update feature, Start> Windows Update that connects to Microsoft’s Web site. (Internet Explorer is required.)

Macintosh OS X updates are available via Apple Menu> Software Update or, Apple Menu> System Preferences, click Software Update (if you’ve disabled automatic checking). If you have automatic checking enabled, set it to daily or weekly.

Most software companies provide incremental updates via their web sites, e.g., a security vulnerability may be discovered in an instant messenger program and the company will release an update to correct the problem. Check weekly for available updates for all applications.

Back to Top

Malware & Phishing

Malware (malicious software) is an umbrella term for any program or file that is harmful to a computer. Therefore, malware includes viruses, worms, Trojan Horses, adware and spyware.

In general terms, a virus appends or otherwise alters a file, while a worm resides in memory and self-replicates via unpatched vulnerabilities which consumes system resources. Viruses originally spread through removable media; more recent viruses and worms spread through network connections, exploiting vulnerabilities in operating systems, programs, and particularly email applications and web browsers.

Trojan Horse programs can be used by another remote computer to gain administrator rights to the desktop computer on which the Trojan is installed.

Spyware and adware describe malware applications that can be installed on your computer with or without your knowledge. The least damage these programs do is track what web sites you visit, and send that information to advertising companies. The more malicious programs can collect your personal information (email address, credit card number(s), Social Security Number) when you fill in forms on the Web, and send that information to criminals who then use the information for indentity theft.

Phishing is when carefully crafted Web pages and email messages falsely represent known and trusted sources, e.g., banks, credit unions, PayPal, to scam a person into divulging personal and financial information.

Malware removal can be difficult. Contact the ITS Support Center (277.4848) for help.

Back to Top

Firewall

ZoneAlarm is workstation software that helps protect Windows from malicious network activity. ZoneAlarm can provide additional network protection. ZoneAlarm is available from ITS Software Distribution, see http://its.unm.edu/swdist for current pricing (departmental or open PR). Visit the ZoneAlarm Web site (follow the Download & Buy or Free ZoneAlarm and Trials links) for more information about a gratis license. Personally owned computers may qualify for a free license.

Windows XP (Service Pack 2) installs a firewall that is automatically enabled. ITS recommends using this firewall if you are not using other firewall software.

Back to Top

Backup

Back up your important data. In the worst case, your computer could be seriously compromised and you could lose all your data. A backup ensures that you will have your most important files available. 20MB of space is available with the Briefcase feature at myUNM. Newer computers ship with CD and/or DVD writers and CDs/DVDs will store from 750MB to 9GB of data. The newest zip drives and disks will also store about 750MB of data. Removable media like CDs/DVDs or zip disks will meet most needs for larger data backup requirements. If you need to back up a larger amount of data, consider an external hard drive. If you prefer a more compact storage option, consider a 1 or 2GB USB flash (thumb) drive. Find basic instructions for burning multi-session data CDs at the ITS Web site.

Back to Top

Copyright

The following information is provided by the University Counsel’s Office.

The Motion Picture Association of America (MPAA) and the Recording Industry Association of America (RIAA) are aggressively pursuing copyright violations effectuated through Peer to Peer (P2P) software like Kazaa, et al.

For several years, the RIAA has been filing lawsuits that included claims against individuals using computer networks at universities around the country. This year, the RIAA has specifically threatened lawsuits against individuals using UNM’s network.

Statutory infringement penalties for these cases (as provided for in the Copyright Act), can range from $750 to $30,000 per infringed work, though the amount may be raised to $150,000 per infringed work in cases of willful infringement.

While there are legitimate uses of file sharing technology, it generally is not acceptable to share copyright protected MP3 files over the Internet via P2P software. Neither the fact that the technology makes it easy, nor the fact that it is done for free, is a viable defense to a copyright infringement suit.

UNM Legal Counsel has assembled information on the DMCA, the TEACH Act, and “fair use” issues so that students, faculty, and staff can be aware of how best to protect themselves from legal action.

Back to Top

Resources

Back to Top