RETURN TO CSUN HOMEPAGE
Access Keys

This information applies to pages in the CSUN template system.Windows-press ALT + an access key. Macintosh-press CTRL + an access key.

The following access keys are available:
UNIVERSITY POLICIES AND PROCEDURES
SUBJECT: SECURITY ATTACKS POLICY
POLICY NO.: 500-08      REVISION: NEW       ISSUED: 3/18/2004       EFFECTIVE: 3/18/2004

POLICY:

All campus computing resources (desktops, servers, network devices, etc.) may not be used to participate in any activity that adversely affects other campus users or that poses a security threat either to the campus or to external entities. Such threats include, but are not limited to: port scanning, DOS (Denial of Services) attacks, and the sending of SPAM. Systems that are used to engage in such activities shall be disconnected from the campus network.

PURPOSE:

The campus network is a resource used by the entire campus community. To ensure that this resource is properly maintained and available for its intended use, all systems that adversely affect, with malicious intent or not, the integrity of the network must be disconnected from the campus network. Disconnecting these systems from the network will:

1. Protect the campus from malicious intrusions, viruses and other security threats,

2. Reduce the University's exposure to liability from electronic attacks (etc) that originate on campus, and

3. Ensure that other campus users can effectively use the campus network to further the     academic mission of the campus.

PROCEDURES:

1. All reports of suspicious activity on the campus network shall be investigated to determine the affected resources.
2. Upon confirmation that a system or device is adversely affecting the integrity of the campus network:
a. The University Help Desk shall notify IT / Network Engineering and Operations and the local system administrator (when possible) that the system is to be disconnected from the network.
b. IT / Network Administration shall disable the port serving the suspected system or device and take other protective steps as deemed appropriate.
3. The system shall remain disconnected from the network until the responsible administrator can demonstrate the system or device is no longer a threat to the campus or to external entities.
4. The responsible administrator shall contact the University Help Desk (helpdesk@csun.edu or x1400) to request that the system or device be reconnected to the campus network.

RESPONSIBILITIES:

The local system administrator must ensure that all devices attached to the campus network have appropriate operating system patches applied, virus protection software up-to-date, computer administrative controls enabled, and other appropriate security measures in place. The responsible system administrator must cleanse and reinstall any compromised system before it can be reconnected to the campus network.

FURTHER INFORMATION:

Chief Information Officer (hilary.baker@csun.edu)


Approved by the President


California State University, Northridge at 18111 Nordhoff Street, Northridge, CA 91330 / Phone: 818-677-1200 / © 2006 CSU Northridge

Last Updated: 4/19/2007