1. Information Security Session November 11, 2004
9/19/2018
Information Security Session November 11, 2004
Bill Eaheart
Network Security Coordinator
DePaul University
NIDS with Snort

2. Information Security at DePaul
Who we are
Information Services - Business Continuity and Security Group (BCS)
Web Site
Addresses for BCS team
Bill Eaheart -
Eric Pancer –
Arlene Yetnikoff –
Ed Gregory –
Cheryl Barkby -
Maybelline Davis -
Reporting security incidents
9/19/2018
Information Security

3. Today Provide practical information
General guidelines for secure computing
Question and Answer
Presentation available on this web page:
9/19/2018
Information Security

4. Securing Windows Systems
Windows Update
Virus and Spyware Protection
Use a Host Based Firewall
Account and Password Security
File Sharing
Peer-to-Peer File Sharing
s and Downloads
Physical Security
Backups
Microsoft Baseline Security Analyzer
9/19/2018
Information Security

5. Windows Update Microsoft provides security patches and updates
Check for updates at least once per month
Security fixes released on the second Tuesday of each month
Manual Update
Open Internet Explorer 
Windows Automatic Updates makes this easy
Start  Control Panel  Automatic Updates
DePaul makes it even easier
Software Update Services (SUS) server
9/19/2018
Information Security

6. Virus and Spyware Protection
Malware (MALicious softWARE) – designed to make life unhappy (virus, trojan horse)
Install Anti-virus software
Regularly update anti-virus signatures
Available products
Commercial
McAfee Antivirus -
Norton Antivirus -
Commercial/Freeware
Avast! -
AVG –
DePaul makes it even easier
McAfee Anti-virus and McAfee ePolicy Orchestrator (ePO)
Student download -
Spyware
Gathers information without your knowledge
Ad-aware -
Spybot Search and Destroy -
Spycop -
9/19/2018
Information Security

7. Host Based Firewall Best PC firewalls Windows XP Commercial Products
Track incoming and outgoing traffic
Allow you to set up rules
Windows XP
Internet Connection Firewall (ICF)
Inspects incoming traffic only
Start  Control Panel  Network Connections  Change Windows Firewall settings
Commercial Products
Sygate Personal Firewall
ZoneAlarm
Tiny Personal Firewall
Norton Personal Firewall
BlackIce PC Protection
9/19/2018
Information Security

8. Account and Password Security
All accounts must have strong passwords
Weak or no password accounts are an open invitation to hackers
If possible do not run your computer as administrator
Disable any unused accounts
Strong passwords
Special characters (*!$+) mixed with letters and numbers
Mixed upper- and lower-case letters and Punctuation characters
Nonsense words that are easy to pronounce but aren't in any dictionary
Eight or more characters
Use a password sentence or passphrase
I need to visit the Kmart at 4:00 
My #1 Password!
Do not use either of these passwords 
9/19/2018
Information Security

9. File Sharing Some advice – Do not use shared folders 
Unprotected shared folders or ones with weak passwords allow hackers to walk right into your computer
On DePaul’s network used our Novell network
If you must use shared folders - protect access
Use a strong password
Do not make a share writeable by others
Do not share entire drives – C:\
Understand permissions to prevent a malicious user from damaging your data
9/19/2018
Information Security

10. Peer-to-Peer File Sharing
Many peer-to-peer programs like KaZaZ, Limewire, Gnutella and others set up your computer to be a server
Disable file sharing for popular programs
University of Chicago –
Organizatons watch for distribution of copyrighted material - Do not share copyrighted material
Unwanted components could be installed, such as Spyware
9/19/2018
Information Security

11. s and Downloads
Be suspicious of any attachments sent by – even if you recognize the sender
Never open files from people or sources you are unfamiliar with and did not expect to receive
Attachments can contain viruses
Scan any downloaded files with your anti-virus
9/19/2018
Information Security

12. Physical Security Work space Public computers
Screen saver or lock the workstation
Public computers
If in an open area do not walk away from a machine you should log out or lock the machine
Remember to log out of a computer when leaving for an extended period of time
9/19/2018
Information Security

13. Backups Back up all critical files
Protects against hardware failure, viruses or compromised computer
DePaul makes it easy
Personal folder on the N:\ drive
Backed up by Information Services
Encrypt any sensitive data
9/19/2018
Information Security

14. Microsoft Security Analyzer
Microsoft Baseline Security Analyzer
Free, vulnerability assessment tool for the Microsoft platform
Download Software
Installation Wizard
Scan your computer
9/19/2018
Information Security

15. The End! Thank you Any questions weaheart@depaul.edu 9/19/2018
Information Security