SERVICES

Welcome to Network Security Services, we provide the Southern University community with the tools and resources needed to maintain the security of information and the technology that we use to manage it. Network security keeps up with outbreaks that may affect SU network, ensuring that Southern University users are aware of possible problems and ways to protect them appropriately.

What we do to protect the network is analyze daily network scans and investigate network traffic, while aiding in emergency response and disaster recovery by tracking down and resolving serious incidents, and coordinate with the campus judiciary system and law-enforcement agencies.

We evaluate the security of Southern University’s computers, networks, and data as well as personal workstations through general network scans and other methods to determine current vulnerability status. Also, we educate the SU population on how to safely use technology by identifying and promoting the "best practices" regarding security of data and systems by sending alerts for current viruses, attacks, and other security vulnerabilities.

Research is also done to implement new ideas for classes and security initiatives, while reviewing new communications applications and suggesting secure applications for use at the University and in University projects. We introduce campus standards for security, and review applicable policies and procedures in the context of these standards.

Services we provide:

Antivirus
Network Security Services recommends that users of the network install antivirus software to their computers. Most viruses will be caught by antivirus as long as the antivirus software is kept up to date. It is absolutely crucial that users run antivirus software on their computers. SU provides any current student, staff, or faculty with a copy of E-Trust Antivirus free of charge. This software is highly recommended for all users and is a prerequisite for computers in Student Housing. We also recommend that all users download the E-Trust installation documentation prior to installing E-Trust.

Anti spam

AntiSpyware
Spyware is unwanted software that performs certain behaviors on your computer, such as advertising, collecting personal information, or changing the configuration of your computer, without obtaining your consent. To prevent spyware, it is recommended that you install antispyware to your computer.

You may visit the Microsoft website to find information on Windows AntiSpyware (Beta). It is a security technology that helps protect Windows users from spyware and other potentially unwanted software. Known spyware on your PC can be detected and removed. This helps reduce negative effects caused by spyware including slow PC performance, annoying pop-up ads, unwanted changes to Internet settings, and unauthorized use of your private information. Continuous protection improves Internet browsing safety by guarding over fifty (50) ways spyware can enter your PC.

Password Policies & Recommendations

Password enumeration attacks are becoming more common on Windows™ workstations.
Recent increases in computer hacking and viruses worldwide have caused many systems to become exploited. Hackers often attempt to gain access to a computer by guessing all possible combinations of passwords. Using a modern PC, a hacker can normally break a simple password remotely in less than 60 seconds. Once broken, your password may allow someone to access your files.

Network Security Services suggest these requirements are met to ensure a good password:
• The password should be at least 8 characters long
• The password should contain at least one non-alpha character (a number, period, space, comma etc)
• The password should contain at least one uppercase and one lowercase letter
• Not begin with a number
• Not be an alphabetic series, either forwards or backwards (i.e., ABCDEF or FEDCBA)
• Not be a numeric series, either forwards or backwards (i.e., 123456 or 654321)
• Not be a string of all identical letters or numbers (i.e., AAAAAA or 111111)
• Not be a common keyboard key sequences (i.e., ASDFG or QWERTY)
• Not be an easily guessed word such as your name, userid, or any variation thereof (backwards, changing case, etc.)
• Not be a word(s) referring to anything noticeable about you, such as the name of your spouse, child, pet, favorite football team, or literary character
• Not be a word that appears in a dictionary

Investigations (Forensic Systems)

Network Security Services is in the process of monitoring the network to determine if there has been any illegal, unauthorized, or unusual activities from computers, laptops, servers, or office workstation that are using SU network.

This will be done by computer forensics, it is the analysis of information contained within and created with computer systems and computing devices. It involves the preservation, identification, extraction, documentation and interpretation of computer data.

This can be for the purpose of performing a root cause analysis of a computer system that had failed or is not operating properly, or to find out who is responsible for misuse of computer systems, or perhaps who committed a crime using a computer system or against a computer system. Computer forensic techniques and methodologies are commonly used for conducting computing investigations in the interest of figuring out what happened, when it happened, how it happened, and who was involved.

Firewall Management

Network Security Services suggests you install a firewall before connecting to the network. A firewall is software or hardware that creates a protective barrier between your computer and potentially harmful content on the Internet. It helps guard your computer against hackers and many computer viruses and worms. A firewall works by examining information coming from and going to the Internet. It identifies and ignores information that comes from a dangerous location or seems suspicious. If you set up your firewall properly, hackers searching for vulnerable computers can't detect your computer.

When installing a Firewall you may visit the Microsoft Security Web site, it provides information about software firewalls made by other companies, as well as hardware firewalls and network routers. This information can help you select a firewall solution if you use an earlier version of Microsoft Windows, such as Windows NT, Windows Millennium Edition (Me), or Windows 98. Hardware firewalls are a good choice for versions of the Windows operating system prior to Windows XP. Windows XP includes an Internet Connection Firewall, which you can turn on. You must have administrator access to your computer to install either of these options.

Wireless Network

The Southern University’s wireless networking services has a different method on how to access the internet. When accessing the internet using the wireless network users will be directed to an authentication page in order to provide better security services.

The authentication page is used to give access to the network to authorized users by verifying who they say they are and denying access to clients that cannot authenticate properly. Authorize users will have to provide their login and password; which is the same login as your blackboard account and your campus email account. The wireless network is available to all Southern University students, faculty, and staff.
.
Once you have logged on, you will be directed to a confirmation website. This website has three links to secure campus websites: a link to the school website, a link to campus email, and a link to Jagnet. To access websites outside of Southern University, users will have to open a new internet explorer window.

Security Network Assessment

The Network Security Services offers Security Assessments. Securing workstations, servers, and other devices in a University atmosphere can be a challenge. The SU network is constantly being probed for vulnerabilities. On top of that, new initiatives for security in Grant environments, Federal Regulations such as HIPAA, FERPA, and GLBA have required much more stringent guidelines for security.

Network Security Services will arrange time to assess your environment. This assessment includes identifying and documenting risks and vulnerabilities to your assets. We will also arrange a time to discuss strategies and/or methods for securing your environment and reducing your exposure to the outside world. This includes working with 3rd party vendors for application security.

Please contact TNS if you are interested in hearing more about how we can assist your department in developing, planning, and designing security protocols in your environment.

In order to use the computer resources and network services available at Southern University, students, faculty and staff must adhere to the policies and procedures defined and authorized by Technology and Network Services.

For any further information or assistance relating to Network Security you may contact the Technology and Network Services Help Desk at 771-3935 ext 228 located in J.B. Moore Hall. For further help contact Terrence Cyriaque, Coordinator of Network Security Services at 771-4644 Ext 210.

 

Terrence Cyriaque
Coordinator of Network Security Services
Office of Technology and Network Services

networksecurity@cxs.subr.edu

Located in J.B. Moore Hall, Room 216
Phone: (225) 771-4644 Ext 210
Fax: (225) 771-2883