|
StartSafe Information for New Student ComputersIf you must store sensitive data associated with JMU business or constituents, contact JMU Security Engineering at it-security@jmu.edu for assistance.
Most of these instructions apply to Windows computers. For others:
For Windows computers: These procedures assume a brand new Windows Vista or Windows 7 computer. Windows versions prior to Windows XP Service Pack 3 are no longer supported by Microsoft and are unafe to use due to unavailability of security updates. Unsupported versions include XP SP2, Windows 2000, and Windows ME/98/95/NT. Microsoft Office 2000 and prior versions are no longer supported by Microsoft and are unsafe to use due to unavailability of security updates.
STEP 1 - Download and Install All Critical Updates from the Microsoft Update Web SiteThis step will fix the defects in Windows software that let criminals take control of our computers (and our privacy, our identity, our network, etc.). This step can be time consuming because there are so many security updates to install, particularly for older computers. A later StartSafe step will have you configure your computer so it keeps itself up to date so you don't have to do this again. You must repeat the process until you're told that no more critical updates are available. Doing it once may leave you vulnerable. To update your Windows Vista or Windows 7 computer:
To update your Windows XP computer:
Older Microsoft Windows operating systems ( XP-SP2, 2000, 95, 98, ME, NT ) are no longer supported, are not provided with security updates, and cannot be secured so they should not be used, particularly on a network.
STEP 2 - Set up your computer to automatically download future updatesOnce you are caught up with current critical Windows updates, you'll need to install the new ones that come out about monthly. You can do this manually ( not recommended ) or you can set it up so that it takes care of itself ( recommended ). Your computer will check for updates, download them, install them at a time specified by you, and reboot all on its own. If your computer is turned off at your selected installation time, it will perform the installation the next time it is powered on. To set up the automatic updates, follow the instructions at Microsoft's Automatic Update Site.
STEP 3 - Install Anti-Virus Software Provided by JMUAnti-virus software must be installed to protect you from criminally written programs that you may inadvertently run on your computer or that criminals may force on your computer by using unknown defects. JMU has purchased a site license for Symantec Endpoint Protection anit-virus software that allows all faculty, staff, and students to use it both at the office and at home. The advantage of using this software is that it is provided pre-configured to offer the best security and is fully supported by the JMU Helpdesk. TO PREVENT PROBLEMS, ALL OTHER ANTIVIRUS SOFTWARE SHOULD BE UNINSTALLED FROM YOUR COMPUTER before installing Symantec. The Symantec anti-virus software can be downloaded from the JMU Computing Downloads web page. Having anti-virus software does not protect you from new viruses that are released daily. A clean virus scan of a program does not mean its safe to run. You cannot legally install or distribute the JMU licensed Symantec anti-virus software on computers owned by people who are not current students or employees of JMU. Microsoft itself offers a product called Security Essentials that is free for home computers. STEP 4 - Configure your computer to display file names correctlyWindows hides the real names of files from you which makes it easy for virus writers to fool you. It also makes it difficult to do something which should be simple - change a file name. You can tell your computer to tell you the truth about most file names by making the simple change below. On Windows 7 and Windows Vista computers:
On Windows XP computers:
Step 5 - Install security updates for other software you may have installed ( e.g. iTunes, Winamp, Firefox, QuickTime, RealPlayer, Skype, Flash, Adobe Acrobat Reader )People often add programs to their Windows computer. Many of these programs have security defects that can allow criminals and viruses to take control of the computer. In fact, these programs are currently more often the target of attacks and more responsible for infections than Microsoft software. A partial list of programs installed on a Windows computer can be found in the 'Add or Remove Programs' Control Panel. Download locations for programs commonly installed that have serious and/or actively exploited security defects are listed below:
Keeping track of all your installed software and needed updates is tedious, time consuming, and errorprone. One company that makes a product that can help with this task and that has had favorable reviews is Secunia. They offer a web based service you can visit with a browser that will check your computer for needed updates for a few dozen of the most popular programs. If you want, they will email you reminders on a periodic basis to rescan your computer. They also offer a more comprehensive program that can be downloaded and installed on home computers that can check for updates for thousands of programs. As always when using a web service that requires downloading software, the terms and conditions and privacy policies should be examined. * Click here for the web based service. Step 6 - Password protect your screen saverSet your screen saver up so that you're required to type your password before it will unlock.
Step 7 ( optional but STRONGLY recommended ) - Set up and use a safer account for day to day useSafer accounts for day to day use on Windows XP and Vista computers can be set up fairly simply. If you want to take one more step that will reduce risk more effectively than many of the other recommendations, set up a limited account on your Windows 7 computer for day to day use ( procedure for Windows XP and Windows Vista is similar except that the account on Windows XP is called 'limited' instead of 'standard' ). Many of today's viruses and spyware will not install when using such an account. If they do install, their damage will be limited.
Step 8 - Review Information on Safe Operating Practices and Current Threats and IssuesOnce you have set up your computer in a way that will protect it and you, it is important to realize that your operating habits can reverse all the work you've done and allow criminals or viruses to take control of your computer or information. Please review the JMU Computing Security web page for guidelines on operating it in a safe manner, common mistakes, and current threats and issues. If you must store sensitive data associated with JMU business or constituents, contact JMU Security Engineering at it-security@jmu.edu for assistance.
Addendum:
File/Music Sharing Programs If not configured, maintained, and operated properly, file sharing programs may be the cause of numerous problems:
USB Portable Storage Devices There are large numbers of malicious programs circulating that will infect such devices or allow such devices to infect computers to which they are connected. USB devices include USB keys, USB disk drives, cameras, and digital picture frames. Risk reduction measures:
|