Email Security @ iun.edu

• Improved Security with Webmail
• Intruder Lockout
• Passwords & Security

Improved Security with Webmail

Webmail has improved security using a certificate that increases the encryption of information when users initiate a Webmail session.

If it is not already set, the first time you log, you may get a dialog box asking whether or not you would like to activate this increased security certificate. Select 'yes' and that's all there is to it.

Intruder Lockout

So you've tried to log into your Webmail account and you get an error message stating that your account in under 'Intruder Lockout'. This is one of the basic security features of Webmail here at IUN.

The theory behind this security feature is that one of the basic methods used by hackers is to run a program that cycles through millions of possible password combinations, trying to login with each in order to hit the right one. Once they get this password, they can enter a system as if they are the person who has legitimate access. That's where Intruder Lockout comes in. After a certain number of failed login attempts, your Webmail account will initiate the Intruder Lockout protection, thus 'locking' that account and denying any access until it is 'released' by an administrator.

If you get this message, contact the IUN IT Help Desk (Dial HELP).

Passwords & Security

Far too many people treat the various passwords they use far too lightly. They give them to coworkers; they write them on a 'sticky-note' and 'hide' it on the underside of a desk drawer (the middle drawer is perhaps the most popular); some even write it on a piece of paper and just leave it on their desk. All of these actions seriously compromise the security of the entire technology system of the University.

While all of these actions may seem innocent, these actions are serious breaches of IU security . Information technology personnel throughout the world constantly hear how they are 'too paranoid' about such matters. That is until someone finds that all of their work has disappeared or been posted on a website. And if it was confidential information in those files, then someone might be looking at a very serious lawsuit, reprimand, or worse.

Here are some tips to keep your information and computer safe.

1. Passwords are X-Files -- 'Trust No One' . Yes, your coworkers are nice, etc., but a password is only effective if you are the only person who knows it. Even IT personnel here at IUN do not have any access whatsoever to your password nor do we want access. Reducing the chances that someone else might obtain your password should be one of your top priorities.
2. Passwords are Never Forever. You should change your password(s) on a regular basis. Again this is for security purposes. If your password has been compromised, you may not notice any changes in your information -- for the time being. The person may just be using it to access certain information rather than destroy files. You should change your password at least once a month
3. Passwords Shouldn't be Painfully Obvious. If you have Winnie the Pooh paraphernalia in your office and it is well-known that you are a big fan of the cuddly bear, you can guess what someone might start trying as your password. More info on good passwords.
4. Log-off When You Take Off. Leaving your computer accessible when you walk away from it is another way to allow security to be compromised. There are many cases where a bold hacker will simply walk into the office and start using that machine. Why didn't anyone stop him? They all assumed he was from the company's IT department. With the vast majority of computers here at IUN running Windows 2000, the correct username and password are required to gain any access to the desktop. Going to START > SHUT DOWN and then choosing Log Off from the drop-down menu will 'lock' the computer to other users. If someone you don't recognize does walk into your office and just starts using a computer, don't be afraid to ask what they're doing. This doesn't have to be a hostile confrontation -- simply ask who they are, introduce yourself, and then quietly check with IT (call The IT Help Desk at 4357) to make sure they are who they say they are. We will not be offended if you do this -- in fact, we'll probably say 'thank you'.
5. Seriously, log-off. Many people refuse to do this since it is 'inconvenient' or they are going to be gone for 'just a minute'. As everyone probably realizes, you are never gone for just a minute. Seriously, log-off.

Confidential Information is Confidential. The handling of confidential information in this age of computers is more difficult than ever so here are some tips.

• Don't keep confidential information on your hard drive if at all possible (if this is not possible, log-off when you take off and shut down the computer for the night);
• Keep confidential information on removable storage media (and then back that up);
• Keep these disks in a locked and secure place (not on your desk in a locked office);
• And finally, treat the information as if it was about you.