Safe Computing

Print

Phishing

Beware of any e-mail purporting to be from Information Technology Services asking for your W&L password. Any such e-mail is "phishing": an attempt to steal personal information. ITS staff will never ask you for your password, via email, phone, or any other means. Remember, your password is your secret.

Never respond to e-mails asking for your W&L password or other personal information, such as bank account or social security numbers. Instead, please forward any/all suspicious emails as an attachment to phish@wlu.edu, and then delete the email.

Please protect yourself:

  • Use the 30-second rule: before clicking a link or opening an attachment in an unsolicited email, take time to carefully evaluate the message.
  • See analysis of a recent Phish.
  • Use the hover technique to identify the destination of a link before you click
  • If you disclosed your W&L password in response to a phishing email, change your password immediately.
  • Never disclose your password to anyone.
  • Do not use your W&L password for any service outside the University.

E-mail and viruses

W&L uses constantly updated filters that eliminate most viruses. But newly hatched viruses sometimes slip through our system, so it's important to follow some important rules:

  • Be wary, as always, of any e-mails with attachments, especially those you aren't expecting. This includes e-mails from people you know, since many viruses can "spoof" the sender's e-mail address.
  • Be particularly suspicious of e-mail attachments with file extensions such as ".exe" and ".scr"
  • When you receive an e-mail attachment you are not expecting, delete it without opening the attachment.
  • Report spam (unwanted e-mail) by forwarding the message to spam@wlu.edu

Students should be sure the preinstalled anti-virus software on their pc is the most current version. Anti-virus software is automatically installed and configured on University-owned computers in labs, offices and other settings. If you suspect that your computer is infected with a virus, call the help desk at 540-458-4357  or email them at help@wlu.edu.

Adware/Malware

Adware/Malware can also hinder the proper functioning of your computer. It can also be used to sell your personal information without your knowledge. Here are some rules of thumb to help avoid infection:

  • Web browsing. Don't install software when prompted "Install and run this:..........."
  • If a website demands that you install a plugin, click no. Most sites will work without installed plugins. If it does require the plugin, judge how reputable the source is before installing. For instance, Adobe Acrobat and Macromedia Flash are both acceptable programs to install.
  • Close pop-ups and if prompted with choices, never click "Yes" or "Okay."

Passwords

Select a hard-to-guess password or passphrase, and don't share it with anyone, including those who purport to represent W&L (see Phishing section, above). W&L network passwords must meet the following requirements. These requirements are enforced when passwords are changed or created:

  • Password will need to be a minimum of 16 characters, but longer is accepted.
  • At least one uppercase and one lower case letter is required.
  • Numbers can be used, but are not required.
  • Special characters (e.g., !@#$) can be used, but are not required.
  • Spaces can be used, but are not required.
  • Your passphrase will not expire, unless your account is compromised.

If your password becomes known to anyone, change it immediately. Your W&L network password should be different from any other password you use.

Identity theft

If you follow the guidelines on this page, you'll help to avoid identity theft. This resource from the Federal Trade commission explains identity theft, and what to do if your identity is stolen:

Data security on smart phones

Certain types of advanced cell phones, such as Blackberries, iPhones and phones using the Windows Mobile operating system, can be configured to automatically retrieve e-mail and other data from W&L's Exchange (Outlook) server. When the devices are configured in this way, ITS enforces minimum security settings to protect potentially sensitive University data stored on the devices:

  • A password must be used to secure access to the phone, at least four characters in length
  • After seven failed attempts to enter a password, data on the device is erased
  • After a period of inactivity on the device (can vary from 15 minutes to an hour, depending on the device), a password must be re-entered in order to access the device

These settings may function somewhat differently than described here, depending on the device. If you are a W&L faculty or staff member and would like to configure your smart phone to automatically retrieve e-mail and other data from your Exchange/Outlook account, please call the help desk at 540-458-4357 or email them at help@wlu.edu.

Firewall policy, inbound network traffic

ITS uses cybersecurity risk to determine if access to an application or website is allowed or disallowed, not the content of the application or website. ITS operates a "default deny" inbound perimeter firewall as the first level of defense against security threats to the University's network and IT resources. Outbound traffic is "default allow." This means inbound computer traffic from off-campus is blocked - unless the communication originated from a computer on campus or unless there is an exception to allow the traffic. 

Additionally, there are firewalls dividing the interior network into separate zones based on the role of the IT resources within each zone. For example, web servers have distinct and separate roles from database servers.

If you have an academic or work-related reason for un-blocking a specific computer port, please request an exception by completing a Web Help Desk request; go to https://helpdesk.wlu.edu and select request type "Network" then "Incoming Firewall Exception."

W&L security documents

Other resources on safe computing

  • Snopes.com- Just search the issue you are unsure about. Snopes helps clarify scams from myths.
  • Apple Security Support- Most college students have Mac computers but forget to properly use security measures
  • Microsoft Security Support- Microsoft users can find appropriate aid for their given systems here