IT Security Summary 1. Protecting your equipment from theft 2. - - PowerPoint PPT Presentation

IT Security

Summary

• 1. Protecting your equipment from theft
• 2. Securing access to your computer and to your documents
• 3. Saving your documents
• 4. Protection from computer viruses, « Spyware » or

« Malware »

• 5. Protection from Phishing
• 6. How to get help in the case of a computer malfunction
• 7. Conclusion
• 8. Annex

• 1. Protecting your equipment from

theft

Our building is not completely secure from intruders, despite rooms and access to the upper levels locked by keys and access cards. Here are a couple precautions to avoid theft :

— Locking computers : there are secure-cables available at

the CIG-IT support. Moreover, you can leave a spare key at the CIG-IT support desk.

— When not in your office, put your phones and other

electronic equipment on locked down.

• 2. Securing access to your

computer and your documents

— Every UNIL collaborator is attribuated a password and

an username. These are confidential and should not be communicated to anyone.

— Creating a local account is also a posssibility. — Access is either defined in « user mode » or

« administrator mode »

— If you wish, you can lock your computer once you put it

• n « standby »

— One can protect every single document with a different

password.

• 3. Saving your documents

Several backup methods are available at the University of Lausanne: 3.1. DocUnil system: personal space of 1Gb 3.2. CIG Backup server 3.3. external Support 3.4. The UNIL automatic backup system « CrashPlan » Several precautions are better than none, do not hesitate to combine several methods ...

3.1. DocUnil system: personal space of 1Gb

— Every with an UNIL e-mail also has access to 1Gb of

personal space in the DocUnil system, which is saved every day.

— The complete description of this service is available

with the following link: http://www.unil.ch/ci/page2731.html

— You can access this service through the Internet, from

your local computer or the FTP protocol. The username and password are the same as for the e-mail.

— If you are interested, you can get help from the CIG IT-

Support.

3.2. CIG Backup server

— Each member of the CIG has 10Gb of personal space

• n the server, accessible with the same username and

password as the e-mail, which is saved every day.

— From a PC, the server address is: \\nas.unil.ch\cig — From a Mac, the server address is: smb://nas.unil.ch/

cig

— There is also a common area for each group, as well as

common areas for the entire CIG

— You can access this server from the University of

Lausanne, as well as from outside the University of Lausanne using https://crypto.unil.ch service or Network Connect (See annex on how to connect)

3.3. External Support

— Your important documents can be stored on

external media such as an external hard drive that you connect to your computer

— You can also burn your documents on a CD or a

DVD

— It is possible to set up an automatic backup for

your important files using a specific software

3.4. The UNIL automatic backup system CrashPlan

— Some computers have a daily automatic backup with

the CrashPlan software.

— Requests for this CrashPlan system must be sent to the

UNIL Helpdesk, according to information available at the following address: http://unil.ch/ci/page95153.html

— The server is managed by the IT-Services of the

University of Lausanne.

— It is possible to define folders to back up. The maximum

size limit is 50Gb.

— This method can be used for fixed or portable

computers.

• 4. Protection from computer

viruses, « Spyware » or « Malware »

When using the Internet, accessing your email or using external media (USB drives or hard drives), you risk to infect your computer with viruses. Here's how to protect yourself from these attacks:

— Installing an antivirus and anti-malware or spyware

program

— Installing system updates and patches regularly — Do not open an attached document or a web link if you

are not sure of the content

• 5. Protection from Phishing

— The "phishing » is a fraudulent method used by hackers

to steal your personal information (e.g. user name, password, date of birth, credit card number) in order to then steal your electronic identity.

— You should therefore under no circumstances disclose

your user name and password or other private information like your bank account numbers, etc.

— More information about this is available at the following

link: http://www.unil.ch/ci/page61283.html address

• 6. How to get help in the case of a

computer malfunction

To contact the CIG IT support, there is two ways:

— by e-mail by sending an email to

cig_itsupport@unil.ch

— By phone at 4029 (from outside the UNIL 021 692

40 29) And here's how to contact the UNIL helpdesk:

— By phone at 2211 (021 692 2211) Monday to

Friday from 8:00 a.m. to 5:00 p.m.

— By e-mail at the address helpdesk@unil.ch

• 7. Conclusion

— We prefer to set up safeguards for your computer

and your documents, rather than having to respond to a problem.

— Do not hesitate to contact us for advice on the

purchase of equipment or the installation of a protection system.

You can find this document on our CIG server at the following address: nas.unil.ch/cig/groups/ciggen/ cig/Official folder/IT documentation/2012 CIG Presentation IT-Security.pptx

• 8. Annexes

v Connecting to crypto.unil.ch v Using Network Connect v Connecting to a wireless network in Switzerland

using crypto.unil.ch

v Connecting to a wireless network Eduroam in

universities and research institutes in Switzerland and worldwide

v Web Pages on the IT security at UNIL

8.1 Connecting to crypto.unil.ch

— Crypto module allows you to have a secure network from

• utside the UNIL or when using wireless network to

access our institution.

— From a computer, the Internet address is: crypto.unil.ch — To log in, use the username and password UNIL — At end of the session, do not forget to log off and exit

your browser

— The next slide shows you in more detail how the crypto

page is viewed in your browser

In "Web Bookmarks", you can add shortcuts to web pages that are only accessible from a UNIL network, as well as any other webpage In "Files", you can put shortcuts to files on the UNIL servers, as well as the CIG server or the Vital-IT server In "sessions des applications clientes", you can launch the Network Connect application, as explained in Appendix 8.2 Finally, in the input box at the left of the "Browse" icon, you can type the address

• f a website or the path to a server

— The crypto page is also accessible from your

mobile phone, if it has a web browser and allows you to use the same functions as a computer.

— For example, this is the display of the mobile

version of the site crypto.unil.ch from an iPhone:

8.2 Using Network Connect

— The Network Connect function is accessible from

the crypto page, as explained in Annex 8.1. It allows you to work from outside the UNIL as if you were at your workplace.

— So you can connect to an UNIL server, to your

workstation using a specific software or accessing an UNIL intranet site.

— To use Network Connect, you must install the Java

Plug-in (upgrade 1.6.0_31 or a more recent upgrade)

— An iPhone app allows you to use some features

• f Network Connect on your smartphone, such

as opening UNIL intranet web pages.

— It is called « Junos Pulse » and can be

downloaded from the Apple App Store.

I have no information about how the Junos Pulse app works on the Android system -> this app still needs to be tested ...

8.3 Connecting to a wireless network in

Switzerland using crypto.unil.ch

—

I remind you that the https://crypto.unil.ch site is also accessible when you are in a public place like a train station, an airport, a hotel.

—

You can log on to the wireless network of some of UNIL’s commercial partners as detailed using the following link : http://www.unil.ch/ci/page2757_fr.html. Thanks to the PWLAN project by SWITCH, it is possible to get free Internet from the hotspots of our commercial partners: TheNet, Monzoon and Swisscom Mobile points.

—

Connection procedure:

—

Connect to the wireless network of the operator by selecting the corresponding SSID. Then, simply

• pen your browser to https://crypto.unil.ch/ (if you want to access UNIL internal and external

resources) or https://reseau.unil.ch/ (if you only want to access the UNIL internal resources) and identify yourself with your account UNIL

—

List of access points (hotspots)

—

TheNet (SSID = wlan @ thenet) TheNet Hotspot Locator

—

Monzoon (SSID = MONZOON) Monzoon Hotspot Locator

—

Swisscom Mobile (SSID = MOBILE): Swisscom Mobile Hotspot Locator

8.4 Connecting to a wireless network Eduroam in universities and research institutes in Switzerland and worldwide

— Eduroam (Education Roaming) is an infrastructure

based on the 802.1x technology that allows roaming to users in universities and research institutes.

— To connect to the Eduroam wireless network, you

must use your username Unil@unil.ch (e.g. changgel@unil.ch) and your password UNIL

— More information on this service on the following

link: http://www.unil.ch/ci/page62982.html

8.5 Web Pages on the UNIL IT security

— http://www.unil.ch/ci/page2571.html the authentic

section, describes in more detail the use of crypto

— https://wwwexp.unil.ch/dokuwiki/doku.php?

id=pub:securite:start

— MailCleaner: anti-virus and anti-spam filter for your

UNIL webmail: http://www.unil.ch/ci/page5559.html

— And of course the service Helpdesk UNIL: http://

www.unil.ch/ci/page33.html, you can contact in case of problems in our absence