Network security resources and reporting problems

Last revision October 16, 2006

Computers connected to networks are exposed to potentially damaging access by unauthorized "hackers". Protecting sensitive data and providing a stable computing environment for academic work is a priority in the School of Earth Sciences.

Hacker break-ins and compromises of personal computers running various versions of Microsoft Windows are common on the Stanford campus. For example, 7000 PCs were compromised in August, 2003, including 70 in Earth Sciences; hundreds more in March, 2004, including 30 in Earth Sciences; 17 in Earth Sciences in August, 2005; and another five in Earth Sciences in September, 2006.

We have general advice on how to secure Windows PCs against hackers. All Windows PCs connected to the Earth Sciences network must implement a basic set of security configurations using the Stanford Computer Health Check Tool, which is normally run when you register your PC for network access.

So far, Apple computers running either MacOS 9 or X have generally been immune to hacker break-ins. However, Macintosh users should use password protection and encrypted logins. The Software Update program should be checking weekly for new system updates, and the Stanford site-licensed Norton Anti-Virus program should be installed.

Unix and Linux systems generally offer many network services and are vulnerable to hacker break-ins unless properly configured, and security patches are regularly installed. For example, numerous Linux workstations in Earth Sciences research groups were compromised in the summer of 2006 because their users were not installing system software patches.

The Stanford University Information Technology Systems and Services group provides a good website addressing computer security issues. The Secure Desktop Computing site is aimed at computer users and system managers, and provides instructions and links to tools for proactive security.

If you ever notice anything suspicious on your computer system, do not hesitate to contact the Information Security Services office at security@stanford.edu. Please send a copy of your message to the Earth Sciences network manager.

Comments?