How to Secure Your Computer
See also: George Mason University's Information Technology Security website.
Whether you are using the Law School's public wired network or the new wireless network, you need to take the following steps to ensure that your computer is protected from hackers, sniffers, viruses, worms, and other unwanted intruders.
-
Access your GMU email using the web version of MEMO <http://mail.gmu.edu>. MEMO on the web supports SSL (Secure Sockets Layer) which encrypts your data before it is transmitted over the Internet. MEMO does not permit SSL with clients like Outlook and Netscape Messenger.
-
When you visit a web site that requires the entry of financial, or personal data, make sure that the site is protected with SSL. Whenever you see the small padlock icon
at the bottom right of the page, you can click on it to verify that the site has a current SSL certificate. SSL is supported by both Netscape Navigator and Internet Explorer. - Windows users should disable File and Printer Sharing. In Windows XP and 2000, follow these steps:
- Right click on "My Network Places" and select "Properties".
- Right click on "Local Area Connection" and select "Properties".
- Uncheck "File and Printer Sharing for Microsoft Networks" and click "OK".
- Install Norton AntiVirus which is free to all GMU faculty, students, and staff. Enable Auto-Protect and make sure that your virus definition are updated daily with LiveUpdates. Never open an email attachment unless you are sure who sent it and what it contains.
- Windows users should visit Microsoft regularly in order to download and install critical updates. Windows XP, 2000, and ME users can also configure Windows to update automatically. See the following Microsoft links for instructions on configuring Automatic Updates:
Automatic Updates in Windows XP
Automatic Updates in Windows 2000
Automatic Updates in Windows Millennium Edition (Me) - Install a firewall. To enable Windows XP firewall, read these instructions from Microsoft: Use An Internet Firewall. Windows 2000 and ME users will need to install a commercial firewall. There are several companies that provide free basic versions of their firewalls like ZoneAlarm and Kerio. You can also purchase firewalls from Symantec or McAfee.
- If you use Telnet or FTP, download and use a free copy of Secure Shell from the ITU Support Center site.
-
Pick a secure password for your email and other accounts. Here are some quick guidelines:
-
- Avoid names or words found in the dictionary.
- Use a combination of numbers and letters and mix upper-and lower-case characters.
- Include a non-alphanumeric character (such as #, @, or $) in the middle of the password.
- Use seven or eight characters.
-
Windows XP and 2000 users should be sure to set an Administrator password. You may have unknowingly set up a blank password when you first configured your computer. A blank password leaves your system wide open to hackers when it's connected to the Internet. Follow these steps to set or change your Administrator password:
-
Press Ctrl-Alt-Delete on your Windows 2000/XP system.
-
In the Windows Security dialogue box, select the "Change Password..." option.
-
Enter Administrator as the User Name, select your local system (the "this computer") option under Log On To, and enter the old password (if known). Then, enter a new, secure password.
-
WARNING: Remember this password. It is very difficult to recover or change the Administrator password if you've forgotten it.
-
- Do not use or disable file sharing on peer-to-peer (P2P) file sharing software like KaZaA or WinMX. These programs open your system up to viruses, worms, Trojans, or spyware and consume costly network bandwidth. In additions, attackers may use your computer as a distribution point by uploading files that they wish to distribute in order to take advantage of the university's higher bandwidth. This will further degrade network performance as well as you own computer's performance. For detailed instructions on how to disable file-sharing on your P2P application, see the Electronic Freedom Foundation's How Not To Get Sued By The RIAA For File-Sharing.