Security and Network Use at Junction City School District

Transcription

1 Security and Network Use at Junction City School District

2 Why do we need to secure our information? Doesn t the state do that for us? The Department of Information Systems does secure our student and personal information from others outside of the school network. But what if someone here at school went to your computer and was able to access everything. They could change grades, find out SSN s, addresses; even remove someone from the system.

3 What can be done to help prevent this? Every computer will have a screensaver lock on it. After 15 min of inactivity, the screensaver will come on and lock the computer. You will have to put your network password in to get back in the computer. Computer that has frequent access to APSCN will have a 5 min screensaver enforced. The computer can be locked manually when you have something important open and need to step away from the computer.

4 What can be done to help prevent this? Every person that uses a computer will have a username and password that adheres to the ADE standards. When a user is finished using the computer, the computer will have to be either logged off or shut down.

5 Login Standards THERE WILL BE NO MORE GENERIC USERNAMES AND NO PASSWORD ENTRIES Each user will have his/her own username and password to log into the network. This password will also be used for your . Passwords will need to change every 90 days for faculty and 180 for students. Each student will have to log out when they are finished with the computer.

6 Password Management Password Standards At least 8 characters in length Mixture of alphanumeric characters Not reused within five password changes Change user password if suspect their password has been compromised

7 Password Selection Eight characters in length (at minimum) Mixture of alphanumeric characters letters, numbers, special characters Both uppercase/lowercase letters (at least three) Digits/punctuation characters (at least two) Not in any dictionary (not any language, slang, dialect, jargon, etc.) No personal information, names of family, etc. Easy to remember Can be typed quickly Put together an acronym that has special meaning to you

8 Password Handling A password you memorize is more secure You should NEVER write down a password, but if you must write down a password, follow a few precautions: Do not identify the password as being a password Do not include the name of the account on the same piece of paper Do not attach the password to a terminal, keyboard, or any part of a computer Mix in some noise characters or scramble the written version of the password in a way that you remember, but make the written version different from the real password Never record a password on-line and never send a password to another person via

9 Password Handling Don t reveal a password over the phone Don t reveal a password in an message Don t reveal a password to the boss Don t talk about a password in front of others Don t hint at the format of a password (e.g., my family name ) Don t reveal a password on questionnaires or security forms Don t share a password with family members Don t reveal a password to co-workers while on vacation

10 Novell Zenworks Zenworks is a content management tool that we can use to better manage the computers and users on the computers. It allows the ability to install programs without having to physically go to the computers. It gives remote access to view or control the computer. It will set up policies to manage individual computers and updates.

11 Novell Zenworks Logging In Zenworks uses the same username and password that you use to log onto the network, so you should never see a ZENworks log in page. If you see a Zenworks log on page, press cancel and notify me.

12 User Management Each person who uses a computer will have to have a username and password that complies with State requirements. Each student will have their own username from 12 th grade down to 4 th grade. K 3 will have a single username and password for all teachers. Only those grade teachers can use those usernames specified for their grade. Each user will have their own home directory on the server. This is used to save important documents and files needed for everyday use. Music, pictures, and large files will need to be saved either on a flash/jump/ usb drive or external hard drive.

13 Computer Protection We do have a centralized managed anti-virus program on the computer, as well as anti-malware/ anti-spyware software. But it may not be able to protect your computer from some viruses, so make sure you know what you are clicking on. You can get viruses and malware/spyware from many places that you wouldn t think of normally.

14 Ways to get Viruses and Malware 1. Go to porn websites. 2. Try to go to Warez and Crack websites. 3. Use music sharing software. 4. Download free screensavers, toolbars, browser helpers, unknown cleaners and that type of thing - especially software offered from pop-up ads. 5. Put on the Webshots screen saver or any other screen saver that updates daily. 6. Run as many things in the background as possible; even for software you use only once in a while. 7. Don t delete drivers from printers you threw away 5 years ago. 8. Download animated cursors. 9. Use the automatic viewer pane in your program. 10. Blindly click on things without reading them. 11. Going to websites that promote 'free' coupons and bargains

15 How to get rid of viruses and malware Programs that we have to scan computers to get rid of the viruses and malware AVG Malwarebytes After scanning the computer, if you still have a virus, notify me so I can perform diagnostics to help remove the problem.

16 Q & A