New Tools and Tactics from Technology Service. Wayne Gilroy Ross Eaton Tom Janicki Ed Knudsen

Size: px

Start display at page:

Download "New Tools and Tactics from Technology Service. Wayne Gilroy Ross Eaton Tom Janicki Ed Knudsen"

Janice Bryan
6 years ago
Views:

1 New Tools and Tactics from Technology Service Wayne Gilroy Ross Eaton Tom Janicki Ed Knudsen

2 UW System Policy Driven Security Changes UW System Administrative Policy 1030, Information Security: Authentication - Two Factor Authentication based Data Classification - Changes to Campus Password Requirements: LOA 2 12 Characters Complex Lockout Duration 30 minutes Lifespan 180 days

3 UW System Policy Driven Security Changes UW System Administrative Policy 1032, Information Security: Awareness - Mandatory Annual Data Security Training for Faculty, Staff and Student Workers UW System Administrative Policy 1034, Information Security: Acceptable Use All Faculty Staff and Students Read and Accept the Policy Annually

4 UW System Policy Driven Security Changes UW System Administrative Policy 1031, Information Security: Data Classification and - Work with Data Stewards and use specialized software to locate Moderate and High Risk Data in order to implement the proper controls High Risk Examples - HIPPA, PCI, FERPA that is specifically classified as high risk - First name or initial with last name along with other information like Social Security Number, Drivers License Numbers.

5 UW System Policy Driven Security Changes Moderate Risk Examples - information that is proprietary or produced only for use by members of the UW System community, such as project plans, reports, and procedure documents plans - student educational records without identifying references - directory information for employees who have chosen to withhold their personal information

6 Data Storage Best Practices Storage Medium Initial Storage Quota Method of Access Recovery Window Sensitive Data? Standard Department Share (SDS) OneDrive 450 Megabytes 5 Terabytes On campus with campus owned device On campus or off campus with any compatible device One Year 30 Days No No G Drive Enhanced Security Share (ESS) 2 Gigabytes Varies On campus with campus owned device and Web Portal from on or off campus with any device On campus with campus owned device One Year One Year No Yes

7 Microsoft Office 365 Brief Overview

8 Signing in

9 Sign in Page

10 Office 365 Apps

11 Sharepoint

12 Creating a new site

13 Public or private

14 Naming your site

15 Example of what invite users will receive when added to your site

16 Default Homepage

17 Microsoft Software Center Self Remediation of Security Updates, Software Installation, and OS Upgrades

18 Microsoft software center

19 Opening software center

20 Security updates (Monthly)

22 Installing optional software

25 Upgrading your operating system (yearly)

27 Training Resources

28 Security Dealing with spam: What happens behind the scenes and how you can help

29 Modern Spam

Is this a legitimate email? Were you expecting an email from that person? Pay close attention to the sender. Does the link lead somewhere unexpected?

30 Is this a legitimate ? Were you expecting an from that person? Pay close attention to the sender. Does the link lead somewhere unexpected? You should expect uwsuper.edu in the url or the url of a service used by the campus. If you re still unsure and it could be an important , ask our helpdesk.

31 What do they do with this info? Drain your bank account Identity theft Send out hundreds of spam messages from your account

Campus problems from spam Email queues fill up and slow down

32 Campus problems from spam queues fill up and slow down Possible blacklisting of our domain Account is disabled until HD contacted

33 Spam prevention (O365) Spam may be sent to the junk mail folder. Items automatically deleted after 30 days. Check for valid mail from time to time. Right click s for options to remedy false positives.

Total Received 9704 1941 19081 75 1536 5444 7860 45641 21% Rate

34 Spam prevention (Barracuda) Rate Controlled Blocked: Bad Recipient Blocked: Spam Blocked: Virus Quarantined Allowed: Tagged Allowed Total Received % Rate Controlled Typical day of spam filtering 46% Allowed Quarantined 29% Blocked 4%

35 How does Barracuda know what to block? Barracuda central spam database Bayesian database IP/domain Reputation Virus Scanning Our Blacklists/Whitelists Content filtering

36 How can people help? Classify s using the Barracuda Outlook Plugin Open a ticket for addresses to whitelist Be skeptical of suspicious s Contact the helpdesk if you think you may have been compromised

37 How to get the Barracuda Plugin Campus staff and faculty computers should be automatic. On other computers go to

38 What is the quarantine? s that Barracuda is not sure about may end up in the quarantine Also available at Whitelist, deliver, or ignore

Administration of Symantec Messaging Gateway 10.5 Study Guide

Administration of Symantec Messaging Gateway Study Guide The following tables list the Symantec SCS Certification exam objectives for the Administration of Symantec Messaging Gateway exam and how these