How the University Deals with Network Security Issues
The Network Security Center (NSC) is responsible for protecting the University's network from attack and illicit usage. Illicit usage of the network, either as the result of a compromise of a computer on the University's network or as the result of actions of a member of the University community, may place the University at risk. Some of the possible dangers include:
- Litigation - Copyright violations or other illegal actions originating from the university's network may result in legal action against the University or members of its community.
- Loss of network services - An attack may launch a "denial-of-service" attack that floods the network or disables network devices, which will prevent our network from being used. Another example is that a compromised machine may be used to send "junk" electronic mail which may cause sites to stop accepting mail from all of or part of the University's network.
- Violation of privacy - Private information may be available on or available to a machine that is compromised.
- Machines attacking other machines.
To protect the University from these situations, the NSC will take immediate action in any case where a violation has occurred. These actions can include:
- Immediate removal of the machine from the network - The network port to which the computer is attached will be deactivated, the owner or department contact will be notified by email, and an electronic monitor watching for the reconnection of that computer will be started. In the case of wireless computers, the machine will be removed from the wireless network and the user's wireless privileges suspended. The notification process is the same as for wired computers.
- Disciplinary action - The alleged violator will be reported to the appropriate authorities, who will consider disciplinary action. In the case of students, this will be the Dean of Students office.
Individuals are responsible for securing and maintaining all devices that they connect to the University's network.
Information about the NSC and security issues including documents about securing computers and recovering from a compromise can be found at: http://security.uchicago.edu.
