Current Vulnerabilities

Users need to be aware of current vulnerabilities of their computers to remote attack. Some simple configuration changes are required to ensure your computer is prepared to correct new vulnerabilities. The U.Va. standard desktop builds are pre-configured to address these issues and do not require user intervention.

Viruses

Computer viruses represent a significant and evolving threat to personal computers and department servers. Use, and regular update, of anti-virus software is a critical element of security protection.

Read more about virus protection and available software.

Weak Passwords

Use of strong passwords is a key first line of defense against unauthorized access and use of department computing resources. Remember, the combination of your ID and password is the equivalent of your electronic identity.

Learn how to create strong passwords.

File Sharing

All operating systems recognize the need for easy sharing of locally stored files. However, the tools that implement local file sharing are often misconfigured and expose systems to unintentional access and malicious tampering. When file sharing is enabled on Windows machines, they become vulnerable to both information theft and certain types of quickly-moving viruses. This issue is serious at UVa, as many of the cases investigated by the Abuse team involve incorrectly-implemented file sharing.

Check file sharing and system access settings for Macintosh, Windows NT/2000, or UNIX/Linux operating systems.

U.Va.Desktop Configurations

Security has been incorporated into the University's major desktop computer support initiatives. These include the DCI systems with the DCI version of the operating system, computers supported by the Health System Computing Services, and systems with the ITC Premium Desktop installation of the operating system. Users of these types of computers do not need to follow the steps above, as they have been preconfigured already.

© 2009 by the Rector and Visitors of the University of Virginia.

The information contained on the University of Virginia’s Department of Information Technology and Communication (ITC) website is provided as a public service with the understanding that ITC makes no representations or warranties, either expressed or implied, concerning the accuracy, completeness, reliability or suitability of the information, including warrantees of title, non-infringement of copyright or patent rights of others. These pages are expected to represent the University of Virginia community and the State of Virginia in a professional manner in accordance with the University of Virginia’s Computing Policies.