Your Computer + Data Keep a clean machine Having the latest security software, web browser and operating system is the best defense against viruses, malware and other online threats. “As the world is increasingly interconnected, everyone shares the responsibility of securing the cyberspace.” – Newton Lee The threats to each of us are plentiful as we continue to increase our connected presence as digital citizens. From your ever-ready smartphone, to the next generation of “Internet of Things”-connected appliances, we must be ready for whatever lurks – regardless if it is coming from the dark net, dark web or our own version of the “upside down.” We put this guide together with simple things you can do today that will increase your ability to stay safe online. We wanted to make it a little less boring, but bring you things you can use in your digital life. And finally, to let you know we are here to help. If you have a security-relation question, think your account has been compromised or just need anti-virus, we want to help! (Just note, our security team does keep a demogorgon locked away in the datacenter)
The ESU Information Security Team Gary Dodson, Director, ISO gdodson@emporia.edu
ESU provides all current students with Symantec Anti-Virus at no cost! Download instructions are available on the back of this guide!
Back it up Protect your valuable work, music, photos and other digital information by making electronic copies of all important files and storing them safely.
Plug & Scan Never plug in a USB device that you don’t recognize, “USB’s” and other external devices can be infected by viruses and malware. Unless you purchased the USB device or you know exactly where it came from always use your security software to scan them.
Protect all devices that connect to the Internet Along with computers, smartphones, and gaming systems, other webenabled devices also need protection from viruses and malware.
John Garafola, Cybersecurity Analyst egarafol@emporia.edu Tushar Walaskar, Cybersecurity Analyst twalaska@emporia.edu
This is not our security team. 2 | Information Security Guidebook
If this is your computer, you do not need to worry about cybersecurity. You may have to worry about a fire hazard, however. 3
What are some signs that one of your online accounts may have been hacked?
Online Privacy
•
Share with Care What you post can last a lifetime. Update the privacy settings on your online accounts.
•
Consider who may be looking at your social media. Future employers could eliminate you as a candidate simply because of something you posted to social media years prior! Your digital past can follow you!
•
There are posts you never made on your social network page – they may be posts that encourage your friends to click on a link or download an app. A friend, family member or colleague reports getting email from you that you never sent. Your information was lost via a data breach, malware infection or lost/stolen device.
If you believe an account has been compromised, take the following steps: Be aware of what’s being shared Be aware that when you post a picture or video online, you may also be sharing information about others or personal details about yourself like where you live, go to school or hang out.
•
Post only about others as you would like to have them post about you The golden rule applies online as well. Ask permission before you tag a friend in a photo.
Own your online presence It’s OK to limit who can see your information and what you share. Learn about and use the security settings on your favorite online games, apps and platforms.
Shameless plug.
Play our game and you could find yourself in our version of the ‘upside down’!
emporia.edu/strange 4 | Information Security Guidebook
•
You’ve Been Hacked. What now? Tips from StaySafeOnline.org
•
Notify all of your contacts that they may receive spam messages appearing to come from your account. Tell your contacts they shouldn’t open messages or click on any links from your account and warn them about the potential for malware. If you believe your computer is infected, be sure your security software is up-todate, and scan your system for malware. You can also use other scanners and removal tools. Change passphrases to all accounts that have been compromised and other key accounts as soon as possible. A strong passphrase is a sentence that is at least 12 characters long. Focus on positive sentences or phrases that you like to think about and are easy to remember (for example, “I love country music.”). On many sites, you can even use spaces!
If you cannot access your account because a passphrase has been changed, contact the service provider immediately and follow any steps the provider offers for recovering an account.
Try this now...
Here are a few reputable sites that will help you check out your own online security preparedness.
Password Generators and Storing Passwords Should I use a password generator such as Apple’s Keychain?
haveibeenpwned.com You can check your personal/ school email address to determine if it has been compromised in a data breach
howsecureismypassword.net Type in your password to see how long it would take a computer to crack it. Hint: the longer your password the better!
Yes, these are secure and generate random, lengthy passwords. Be aware, however, some are not available across all your browsers or devices. Should I save my password in my browser? Generally, this is not a good idea, especially in public spaces such as computer labs. Using a password generator, however, is different and does not store your password in the browser itself – rather it’s plugged in when needed.
30 Second Security! Here are a few things you should remember and it’ll take you thirty seconds or less to read! -Don’t connect to public WiFi networks. Use cell service whenever possible. -Make your passwords long. Use a phrase or sentence. -If you get an email you don’t recognize or looks strange – delete it. -Same goes for voicemail, texts, and phone calls. If it doesn’t look right to you, chances are it’s a scam. -Use credit cards when shopping online. -Make sure all your devices and softwares are up-to-date. If you see one of these on campus, please contact local authorities.
6 | Information Security Guidebook
7
Installing Symantec Anti-Virus 1. Go to https://hornet365.com 2. Click Students. 3. Click Downloads. 4. Login with your ESU username and password. *Note that you will use the format of “userid@emporia.edu” to login, even though your email address may be “@g.emporia.edu”. 5. Click Symantec Anti-Virus for Home Use. 6. Click either Windows or Mac, depending on which kind of computer you have. This will download the installer file. 7. Once the file has downloaded, click to run it, then proceed through the installer.
More shameless plugs. But good stuff (just like this guide!)