|
CSI: UW Computer Security Initiative
 Pilot Episode
Undoubtedly, many of our readers have seen the frequent
reports of identity theft from universities and
organizations across the nation due to breaches of central,
departmental, or individual data stored on computers. For an
example of the alarming frequency and number of affected
people, see
www.privacyrights.org/ar/ChronDataBreaches.htm.
Over 50.5 million records have been exposed to risk just
since February, 2005!
Most people are familiar with the television show CSI: Crime
Scene Investigation, on which a group of crime lab
technicians, police, and others examine evidence using state
of the art equipment and procedures to discover the
circumstances of a crime and/or uncover the killer of the
week. There is a new group at the University of Wyoming who
will endeavor to bring tools, procedures, and information to
the campus community for computer, data, and identity
protection. This group is the Computer Security Initiative:
University of Wyoming team, otherwise known as CSI: UW.
The CSI: UW team will, over the course of the academic year,
raise computer users’ awareness about the risks of networks
and the Internet, provide information on how to keep data
secure, and teach users safe computing practices. The team
will offer training and informational lectures for
individuals and groups on campus, as well as publish
information in the Branding Iron and other UW communications
media.
One of the goals of the CSI: UW team is to teach faculty,
staff, and students how to take responsibility for their own
computer and data security. The team will cover well-known
security issues such as passwords, viruses, spyware,
hacking, and phishing, along with possible solutions, and
will answer the most important security-related questions,
including:
- Who is responsible for security?
- What does the University of Wyoming do to protect
computers and data?
- What can happen to you, your computer, and your data?
- How do these things happen?
- What can someone do with your password, and how can you
make it more secure?
- What about identity theft?
- How safe is e-mail, surfing the web, or downloading?
- What are some of the top security tips?
- How do I protect the University of Wyoming’s network and
data?
- How do I protect my computer?
- How can I prevent unauthorized access to my computer?
- How do I know if something has happened to my computer or
data?
- How do I fix my computer if it becomes compromised?
Current updates and information on UW’s Computer Security
Initiative may be found on the CSI: UW pages (www.uwyo.edu/infotehc/services/security/csiuw/).
|
First Phase of the SIS Replacement Project Completed
WyoWeb Portal Coming Soon
In early August of 2005, the project to replace UW’s older Student Information System (SIS) with Banner, a new enhanced SIS system from SunGard SCT, successfully reached its first major milestone. The Banner Admissions software module is now in day-to-day use by the UW Admissions office and other campus departments. Additionally, the Banner General Person software module has been implemented. Banner General Person tracks individual information and also provides the new mechanism by which computer accounts (to access the UW network, email and the Internet) are automatically generated. The Admissions and General Person modules are the backbone of the new Banner SIS system. They will provide a solid base on which additional Banner modules will be implemented.
The implementations of Banner Admissions and General Person were completed on-schedule and within the allotted budget. Everyone involved deserves hearty congratulations on a job very well done. The teams working on the project now turn their attention to the other programs and modules that remain to be implemented: the WyoWeb portal (fall 2005), Financial Aid (first phase in January 2006, second phase in March 2006), Student Records and Registration (March 2006) and Accounts Receivable (August 2006). Much more work remains, but to this point, the project has been very successful.
 The WyoWeb implementation, scheduled for later this fall, is particularly exciting. Students, faculty, and staff will have a configurable Web portal (a secure Web site that brings together information from many different sources) through which to access news, software applications, email, calendars, and a host of other information. Users will be able to configure the portal to work in the way that is best for them. As more of the Banner functionality is made available over the coming year, more information and functions will be made available. Students will be able to register for classes, pay bills, review and accept financial aid, and complete a host of other tasks. Faculty will be able to deliver more information to students and will be able to post grades on-line. Finally, the portal will give users the opportunity to suggest new features, allowing IT and other campus groups to deliver the most requested functionality.
More information on the Banner and WyoWeb implementation projects can be found
on the About WyoWeb site (www.uwyo.edu/aboutwyoweb) or by contacting Jim Berrigan, IT Project Manager, at
Berrigan@uwyo.edu or 766-2636.
IT Sets Goals for Windows XP Service
Pack 2 on UWYO Domain
Information Technology encourages all Windows XP users to
upgrade to Windows XP Service Pack 2 before the end of the year.
Why should users upgrade to Service Pack 2?
Ten reasons:
- Help protect your PC from harmful attachments. By alerting
you to potentially unsafe attachments, Windows XP Service Pack 2
(SP2) helps guard your computer from viruses that can spread
through Internet Explorer, Outlook Express, and Windows
Messenger.
- Improve your privacy when you’re on the Web. SP2 helps
protect your private information by applying the security
settings that guard your PC to the files and content downloaded
using Internet Explorer.
- Avoid potentially unsafe downloads. Internet Explorer
Download Monitoring and the Internet Explorer Information Bar
warn you about potentially harmful downloads and give you the
option to block files that could be malicious.
- Reduce annoying pop-ups. Internet Explorer Pop-Up Blocker
makes browsing the Internet more enjoyable by helping you reduce
the unwanted content that pops up when you’re browsing the Web.
- Get firewall protection from startup to shutdown. The
powerful, built-in Windows Firewall is now turned on by default.
This helps protect Windows XP against viruses and worms that can
spread over the Internet.
- Take control of your security settings. The new Windows
Security Center allows you to easily view your security status
and manage key security settings in one convenient place.
- Get the latest updates easily. Enhancements to Windows XP’s
Automatic Updates feature make it even easier to access Windows
updates. Plus, new technology has been added to help dial-up
customers download updates more efficiently.
- Take action against crashes caused by browser add-ons.
The new
Add-On Manager in Internet Explorer lets you easily view and
control add-ons to reduce the potential for crashes and enjoy a
more trouble-free browsing experience.
- Go wireless without the hassle. SP2 improves wireless support
and simplifies the process of discovering and connecting to
wireless networks in your home or on the road. For UW-specific
recommendations of wireless configurations, see our
UW Wireless
Gateway (www.uwyo.edu/infotech/services/network/wireless/) and
AskIT (www.uwyo.edu/askit/)
Web pages.
- Set yourself up to be proactive as part of the CSI: UW
effort. The Computer Security Initiative will explain ways to
protect yourself, your data, your passwords, and your computer.
Upgrading to SP2 is one way to get started.
– Adapted from Microsoft resources at
www.microsoft.com/windowsxp/sp2/topten.mspx
Windows XP Service Pack 2 was released to manufacturers in
August, 2004. Information Technology tested the Service Pack
during the fall of 2004 and officially announced support of its
installation on UW computers during the winter of 2004-2005.
(See the IT News, Winter 2005
Windows XP SP2 newsletter article at www.uwyo.edu/infotech/aboutit/news/newsletter/2005/05Winter.asp#xpsp2.
Detailed information and links to instructions were made
available through this announcement.)
In the spring of 2005, 29 percent of the Windows XP
departmental computers on the UWYO domain had been upgraded to
Service Pack 2. Today, UW network reports show 73 percent have
now been upgraded to SP2. This is great progress! The goal is to
have all Windows XP operating systems upgraded, even those that
are not on the UWYO domain, by the end of 2005.
If you need assistance or would like to make an appointment
for this important upgrade, please contact your IT departmental
user consultant. Alternatively, you may choose to upgrade on
your own. As mentioned in the previous article, users may go to
the Windows Update site at
http://windowsupdate.microsoft.com or
to the local UW network resource at \\uwapps\Patches\WindowsXP\SP2
to install Windows XP Service Pack 2. If you use the local
network resource to install SP2, please follow the instructions
on IT’s AskIT Web site at
www.uwyo.edu/askit/displaydoc.asp?askitdocid=246&parentid=1.
Because of the critical need for this update, IT consultants
will be contacting users in the coming months to schedule the
SP2 installation for those remaining computers that have not
been upgraded. Please help us get all UW computers upgraded.
*There are more than 4,000 Windows computers on the UW
network. We strongly recommend upgrading any system that is
capable of running Windows XP. Windows 95, 98, and NT computers
are no longer supported by Information Technology.
Wireless Computer Access at UW
Wireless network access is available at the University of Wyoming in many campus
locations. For current locations of buildings with wireless access points, see
the campus Wireless Location Map or the List of Wireless Locations
on the Wireless Networks at UW site (www.uwyo.edu/infotech/services/network/wireless/). IT will continue to expand coverage areas as funds permit.
There are four ways to authenticate and connect with the UW wireless network: PEAP (Protected Extensible Authentication Protocol), LEAP, VPN, and Wireless Gateway. PEAP is the recommended access method, as it provides excellent security and is easy to use. With PEAP, once you have authenticated to the UWYO
domain, your computer will automatically connect. For
instructions and additional information, please see the
Wireless Networks at UW site (www.uwyo.edu/infotech/services/network/wireless/).
Many UW users currently authenticate through the Wireless Gateway. However, this option is not recommended, as the data is not encrypted and therefore can be captured and read by others accessing the network. The Wireless Gateway is provided primarily for University guests. In the future, the Wireless Gateway access will be further restricted from reaching UW resources behind the UW firewall.
Most new laptops support PEAP. If you are using an older laptop or a wireless card that doesn’t support PEAP, you should consider replacing it. IT can assist in selecting another wireless card. Users are encouraged to convert to PEAP at their earliest convenience. To set up PEAP on your laptop, see
How to Use PEAP Authentication on the UW Wireless Network (www.uwyo.edu/askit/displaydoc.asp?askitdocid=150&parentid=1), or contact your user consultant or the IT Help Desk, 766-4357, option 1.
UW Technology Services Review
In late 2004, the consulting firm of RSM McGladrey undertook a campus-wide review of information technology services with an eye toward identifying key technology issues and vulnerabilities that affect the University community. As part of the review, RSM McGladrey developed subsequent recommendations to better align UW technology institution-wide with the University’s mission. The results were presented to the University community this past April.
A high-level, broadly based Planning Team was appointed by the President to guide the review process. Serving on the initial team were Rollin Abernethy, Henry Bauer, Leellen Brigman, Bill Gern, Andrew Hansen, Bruce Hooper, Maggi
Murdock, and Robert Aylward. The consultants received input from Deans,
Directors, and technical faculty and staff, of whom 98 completed questionnaires
and 149 were interviewed. The consultants made specific recommendations to the
Planning Team for developing comprehensive strategies for technology, improving
security, and increasing cost efficiency. The Planning Team then invited the
University community to presentations by the consultants and asked for comments.
More than 100 faculty and staff attended, and approximately 30 offered written
comments. Details of the review may be found on the
UW Information Technology Services Review
site (www.uwyo.edu/itsr/).
Many of the recommendations and comments have been incorporated into the
UW Support Services Plan II 2005-2010 (http://oia.uwyo.edu/ssp/) and the
Information Technology Support Services Plan 2005-2010 (www.uwyo.edu/infotech/aboutit/ssp/). The Planning Team will continue to guide UW in implementing these plans and in determining the University’s technological direction.
SAS Upgrade Available
SAS 9.1.3 for Windows is now available free of charge to UW departments. All currently licensed SAS users should upgrade to version 9.1.3 at their earliest convenience. Users who need SAS for work should contact their departmental user consultant to request access. After access has been granted, users may upgrade by:
- Going to www.uwyo.edu/software
- Clicking “Statistical Software”
- Clicking “How to Install SAS 9.1.3 from the UW Network” in the SAS 9.1.3 section
If you need help or have questions on installation, please contact your user consultant or the IT Help Desk at 766-HELP (4357), option 1.
Please note: IT can help with installation support, but is unable to provide functional support for the SAS software application itself.
Access to SAS 8.2 will be discontinued December, 23rd, 2005. New installations of this version are not recommended. Users are encouraged to update to SAS 9.1.3 before the end of the fall semester. (On December 23rd all users will be removed from the older version of SAS and the application will be removed from service.)
If you don’t have an SAS license but need one, call 766-3686 or your departmental user consultant for information. Please report any issues with the new version to your user consultant or to the IT Help Desk, 766-HELP (4357), option 1.
Spring 2005 Technology Survey
In April, 2005, the Division of Information Technology asked students, faculty and staff to respond to an on-line survey to help us improve our services. There were 1,188 responses from students and 952 responses from faculty and staff. Respondents who completed the questionnaire were entered to win their choice of an Apple iPod Mini or a Canon PowerShot digital camera. The winning student, selected at random, was Rebecca Wattier of Spearfish, South Dakota. Staff member Brenda Wiley, an employee in the University’s Human Resources Department, was the faculty/staff winner. Thanks to all who responded to the survey for their help in identifying how to improve IT services at UW. Results of the summary will be posted at
www.uwyo.edu/itsurveys.
Unified Messaging – Voicemails in Your Email
Unified Messaging is an extremely powerful messaging system that integrates voicemail and email. In the past, Unified Messaging was only available for a handful of University voicemail users. With a recent upgrade, Unified Messaging is now available for all campus voicemail users. With Unified Messaging:
- Your voicemails appear as audio email messages in your Outlook email Inbox.
- You can listen to your text emails by dialing into your voicemail - the system reads the text messages to you.
- You can store and forward your voicemail messages just like email messages.
Unified Messaging also includes an additional 25 MB increase in your Exchange email storage quota. Unified Messaging is available for $9.00 a month, just $3.00 more than a basic voicemail account. For more information or to sign up for this service, contact the IT Telecommunications Help Desk at 766-4357, option 2.
Changes for UW Email and the Global Email Address List
Over the summer, Information Technology upgraded the faculty and staff Exchange servers and implemented new student Exchange servers. As a result, all faculty, staff, and students now enjoy the same email services, including an increase to 100 MB of storage. With the upgrade, all new student and new employee accounts are now pre-created and Web access to email is now available through a new Web address:
https://uwmail.uwyo.edu. Additionally, the Exchange Global Address List now includes student names in a second list. (Staff who want to exclude searching the student-name list when composing messages should see
How to Change the Default Address List in Microsoft Outlook at www.uwyo.edu/askit/displaydoc.asp?askitdocid=161&parentid=1.) How To instruction links and information for UW email services can be found on
the UW E-mail Frequently Asked Questions Web page (www.uwyo.edu/askit/displaydoc.asp?askitdocid=460&parentid=1).
Check Your UW Email from a Web Browser
Your UW Exchange email account is available from any computer connected to
the Internet, worldwide. This is particularly useful when traveling or using someone else’s computer. UW’s email system, Exchange, is accessible from any computer with a Web browser at
https://uwmail.uwyo.edu. You will be prompted for your username and password to access your email account.
Accessing your UW Exchange Email from any browser:
- Go to
https://uwmail.uwyo.edu
- Click on Logon to Outlook Web Access
- Enter your uwyo domain username and password
in the pop-up logon box and select OK
 UW BlackBerry® Wireless Handheld is Now Available
A BlackBerry® isn’t a fruit. It is a cellular wireless handheld device that integrates your UW email, address book, calendar, notes and tasks. BlackBerry service connects wirelessly to the UW Exchange email server for real-time access to your email, calendar and Internet without a computer.
Benefits:
- Receive new emails as you would a phone call.
- Handheld device that provides wireless email, wireless Internet and cell phone service all in one device.
- Designed just like cell phone service – stay connected to email while you travel.
- No computer connection needed.
- Easy access to the UW Global Address Book.
- Efficient: you can be on the phone, reading an e-mail and making a calendar appointment all at the same time.
- A user-friendly and effective way to organize your information.
Features:
- Email, phone, Web browser, SMS messaging, calendar
- Bluetooth® headset support for hands-free voice communications.
- View MS Word and Excel email attachments.
- Small, light and comfortable.
- Easy to use.
For more information, pricing, or to sign up for this service, call the IT Telecommunications Help Desk at 766-4357, option 2.
eNews Extra:
Passwords Shouldn't Be Passed On
Your username and password are like your signature: When they
are used to log onto a computer system, you are ultimately
responsible for any document or transaction generated with your
account, since, as far as the system is concerned, an authorized
user is logged on. (An authorized user is someone who is either
an employee or student of the University or has legitimate
access to data that is housed in the University of Wyoming
computer systems.) To maintain security and appropriate
account usage on campus, passwords should always be kept
confidential and password sharing should not be implemented or
condoned as a departmental policy.
New employees may need access to accounts and administrative
systems on their first day of employment. If possible,
University departments should complete necessary hiring
processes well in advance of the new employee’s start date. New
employees should never be given another employee’s username or
password to perform computing tasks.
If you have questions or concerns, please call the IT Help
Desk at 766-4357 (6-HELP), option 1, contact your user
consultants, or email
userhelp@uwyo.edu.
|
