Information Security
Tools and Resources
The tools and resources presented in this section are designed to help the VCU School of Medicine students, faculty and staff members to effectively address security related issues, such as virus infections and stolen or lost equipment. Additionally, some items are also designed to provide information and education on security related topics.
Resources
- VCU Information Security website
The VCU Information Security web page provides all VCU affiliates with advice, information and best practices for securing their electronic devices and information.
- VCU Police Report a Crime Page
The VCU Police Report a Crime Page is designed for anyone to report a crime to the police. In this case, a stolen or lost electronic equipment or media can be reported to the VCU police with this online form. Please keep in mind, all lost of stolen electronic equipment or storage media must be reported within 24 hours.
- VCU Security Contacts Information
VCU Police Non-Emergency: 804-828–1196
Emergency: 804-828-1234VCU Technology Services Helpdesk 804-828–2227 VCU HS Helpdesk 804-828–6447 - VCU Computer Security Policies and Guidelines
This page contains the full list of Information Security policies and guidelines of Virginia Commonwealth University.
- Tips and trick on staying safe on the Internet
The Internet can be a dangerous place to visit if proper precautions are not taken. The following items are designed to help users to protect themselves from the threats on the Internet
- Cyber Security Threats and Tips [Word]
- Internet Browsing Tips
- Do not save passwords in any browsers, as they can be easily compromised
- Turn browser security settings to medium-high at minimum, and avoid adding third party sites to trusted sites list
- Do not install any third party toolbars and watch out for the toolbars that are bundled in with other software.
- Turn on phishing detection filters and pop-up blockers
- Clear the browsing data on a periodic basis, at a minimum, clear browsing cache and history on a weekly basis. For enhanced security, clear the browsing data after each session.
- Watch out for SSL errors when browsing. If a site’s identity cannot be verified, then check its certificate or avoid the site.
- User level privileges and why should we use them
- Operating on administrative level privileges allows an attacker to have full control of a victim’s computer. Contrarily, operating with user privileges will not grant an attacker the full control he / she needs to fully compromise your computer.
- User level privileges can help to prevent the installation of malicious software on your computer
- Browsing the Internet as an user limits the damages an infection can cause on your computer
- Dan’s Security blog
This blog contains some of the latest Information Security related new, threat alerts and tips.
- Cyber Security Tips from U.S. Computer Emergency Readiness Team
This page provides some of the tips and tricks on Information and computer security from the U.S. government.
Tools
- Virus and Spyware Removal
- Workstation and Portable Storage Device Security Resources
- Physical Security Resources
- Virus and Spyware Removal
- Why do I need this?
Virus and Spyware can cause tremendous amount of damage and inconveniences to not only your computer but also your life. Some of the damages a virus or spyware can cause are listed below:
- Damage to your computer and data
- Loss of data stored on the computer
- Spread infection to other computers
- Theft of your personal and business information
- Loss of responsiveness for the computer
- Inability to complete tasks
- Legal consequences
With the protection of Virus and Spyware monitoring and removal tools, you will be notified when your computer catches a virus. Most of the time, the virus will not be able to fully infect your computer and/or steal your information as it can be immediately quarantined by the Virus and Spyware removal programs.
However, please note that at any given time, no more than one Antivirus system should be installed on a machine, as the performance of the machine can drastically deteriorate if multiple antivirus systems are loaded. However, a few Anti-malware and Anti-spyware software packages can be used to supplement the Antivirus software.
- VCU Sophos Download Site
Sophos is the VCU approved Antivirus system and it is required on all University owned workstations. However, as a VCU faculty, staff or student, you are also entitled to download this software for your home computers. Sophos antivirus is available for both Windows and Mac OS.
- Malwarebytes Anti-malware
Malwarebytes Anti-malware is a leading threat detection and removal tool, this tool is classified as an anti-spyware tool. The free version of this tool can help the user remove multiple complex viruses and spywares. The paid version includes the additional real-time protection capability that detects virus and spyware activity in real time.
- Spybot Search and Destroy
Spybot Search & Destroy is another good threat detector and remover, this tool is also considered an anti-spyware software. Spybot detects numerous viruses and spyware, and also offers the optional real-time protection “Tea-timer” module. This tool is completely free to use.
- Super Anti-spyware
Super Anti-Spyware is another excellent anti-spyware software. Similar to Malwarebytes and Spybot, this tool can also detect and remove multiple variants of complex viruses and spyware. The free version of this tool contains most of the features other tools offer, and the paid version also offers real-time protection on for your computer.
- ATF Cleaner (or CCleaner)
ATF cleaner is a tool that is designed to help a user delete its temporary files in web browsers and Windows. This tool not only frees up hard drive storage space taken up by the temporary files, it can also help to delete residual files of viruses and spyware as many of these residual files are stored as temporary files.
- Virscan.org
If you suspect a file maybe infected with a virus, and Sophos is not picking it up, then you can upload it to VirScan.org and have its 32 virus scanners scan it for you.
- Kaspersky Online Virus Scanner
Kaspersky is a prominent name in the antivirus industry, however its products require annual subscriptions similar to numerous other antivirus systems. However, the Kaspersky online scanner is completely free, and can help you scan your computer if you suspect that your computer may have been infected. Unfortunately, the kaspersky online scanner will not automatically quarantine or remove the virus for you.
- Panda Online Virus Scanner
Similar to the Kaspersky online scanner, the Panda Security scanner will also help you determine whether if your computer is infected. However, the Panda online security scanner will not quarantine or remove the virus for you.
- Why do I need this?
- Workstation and Portable Storage Device Security Resources
- Why do I need this?
Lost or stolen workstations and storage devices can put your data at risk. If sensitive data are stored on the device and the device is not properly protected, then the lost or stolen device can put the organization at risk, where possible repercussions include the following:
- Mandatory public reporting of the loss of data
- Short-term and long-term damage to the organization’s reputation
- Loss of funding to the organization
- Mandatory periodic audits and evaluations
Thus in order to protect your personal data and the organization, we must properly secure the storage devices for our data. One of the best ways to protect storage medias is through encryption.
- Verbatim FIPS compliant USB drives
These USB drives have built in security chips that requires the user to login prior to accessing the stored data. These drives will only work with Microsoft Windows 2000, XP, and Vista
- IronKey Secure USB drives
These USB drives have built in security chips that requires the user to login prior to accessing the stored data. Additionally, these drives will also work with Mac OS X operating system as well as the Windows Operating System
- Hardware encrypted hard drives
Similar to the Verbatim USB drives, the hardware encrypted hard drives also have a hardware security chip built in. Numerous hardware encrypted hard drives are currently available on the market.
- Windows encryption options
In addition to encrypting external storage devices, internal hard disks and files can also be encrypted.
- GuardianEdge Full Disk Encryption (Coming Soon!)
GuardianEdge Full disk encryption encrypts the entire internal hard drive, so that all data on the disk is unreadable if a master password is not supplied. This solution is the University required solution for all laptops and can also be applied to desktops that store sensitive data.
- Truecrypt Volume or External drive encryption
Truecrypt is an encryption software that allows the user to encrypt files, USB flash drives or a hard drives. This tool is designed as the intermediate solution for encryption until GuardianEdge is put in place. Please contact VCU SOM Technology Services (828-2227) for more information regarding this tool.
- Windows EFS
Windows EFS is the encryption technology built into Windows. It is capable of encrypting files and folders, but is not able to encrypt the whole disk. EFS should not be used by users who have no experience with the technology, as loss of data is possible with the use of this technology, please contact VCU SOM Technology Services (828-2227) for more information on this tool.
- GuardianEdge Full Disk Encryption (Coming Soon!)
- Mac OSX encryption options
- Truecrypt Volume or External drive encryption
Truecrypt is an encryption software that allows the user to encrypt files, USB flash drives or a hard drives. This tool is designed as the intermediate solution for encryption until GuardianEdge is put in place. Please contact VCU SOM Technology Services (828-2227) for more information regarding this tool.
- Encrypted Volume through Disk Utility
Mac OSX includes a disk utility that allows users to create disk volumes within their current hard disks. Conversely, this technology also allows users to encrypt the volumes they create. For more information on creating an encrypted volume with the Disk Utility, please contact VCU SOM Technology Services (828-2227) for more information.
- FileVault
Mac OSX also includes File Vault, a tool that allows the users to encrypt the data in their Home directory. However, FileVault is only capable of encrypting files within a user’s home directory, and is not the best option for encryption as the technique used with File Vault can cause loss of data. Please consult with VCU SOM Technology Services (828-2227) for more information.
- Truecrypt Volume or External drive encryption
- Why do I need this?
- Physical Security Resources
- Why do I need this?
In addition to encryption and virus protection, it is also important for the implementation of proper physical security. Without proper physical security, computers and storage device are vulnerable to theft, as the lack of proper physical can not only cause possible loss of data, but it can also lead to financial loss through the loss of equipment.
- Recommended Cable Locks for Desktops
Cable locks allows the users to lock their equipment to a stationary piece of furniture, which can significantly reduce the risk of theft. These locks are recommended for any computers that are placed in public areas or may have access to sensitive data.
- Recommended Cable Locks for Laptops
Cable locks allows the users to lock their equipment to a stationary piece of furniture, which can significantly reduce the risk of theft. These locks are recommended for any computers that are placed in public areas or may have access to sensitive data.
- Computrace Lo-Jack
Computrace Lo-Jack is a subscription based software that allows users to track their laptops if it is lost or stolen. Computrace can assist the user and the police in tracking lost and stolen equipment, and certain packages even offers a money back guarantee.
- Tips against physical security threats (lock doors, user verification etc.)
- Always lock the office door when you step out of the office.
- Always lock your workstation when you step out of the office
- Ask any strangers in your area for proper identification.
- Place all sensitive documents and storage media inside of a locked cabinet or drawer.
- Use cable locks and pad locks on computers in public area or computers that have access to sensitive information.
- Never leave a piece of electronic storage media or equipment unattended in a public setting.
- Why do I need this?
