RARG:2008 ResNet Survey:Security and Policies

From ResNetWiki

Jump to: navigation, search

Viruses. Spyware. Trojans. IRC bots. Rogue DHCP servers. DMCA takedown notices. Security and the policies surrounding it appear to have become a prominent issue for those who use and support residential computer networks. Who manages and enforces policies and procedures on your ResNet?

58. Who is responsible for setting policies governing your residential computer network? (Check all that apply)

  • Academic Computing
  • Central IT
  • Housing IT Security
  • Legal Affairs
  • Networking
  • Residence Hall Association/Council
  • Student Affairs
  • Student Government (non-housing)
  • Telecommunications
  • University committee(s)
  • Other (please specify)


59. Who is responsible for enforcing policies governing your residential computer network? (Check all that apply)

  • Academic Computing
  • Central IT
  • Housing
  • IT Security
  • Legal Affairs
  • Networking
  • Residence Hall Association/Council
  • Student Affairs
  • Student Government (non-housing)
  • Telecommunications
  • University committee(s)
  • Other (please specify)


60. How are residents required to confirm acceptance and knowledge of policies, restrictions, and requirements governing the use of the residential computer network?

  • Acceptance and knowledge of policies, restrictions, and requirements are required through an online agreement before the resident's connection is enabled
  • Acceptance and knowledge of policies, restrictions, and requirements are part of the housing contract
  • Acceptance and knowledge of policies, restrictions, and requirements are part of other university policies to which residents agree (admissions statement, computer usage agreement, etc.)
  • There is no formal method
  • Other (please specify)


(Required) 61. Are any network services, ports, or protocols filtered, blocked, or otherwise restricted on your residential computer network?

  • Yes, we filter, block, or otherwise restrict activity on our residential computer network
  • No, we do not filter, block, or otherwise restrict activity on our residential computer network
  • Other (please specify)


62. Who determines which network services, ports, or protocols are filtered, blocked, or otherwise restricted? (Check all that apply)

  • Academic Computing
  • Central IT
  • Housing
  • IT Security
  • Legal Affairs
  • Library
  • Networking
  • Outside vendor
  • Residence Hall Association/Council
  • Student Affairs
  • Student Government (non-housing)
  • Student organization specifically created for ResNet governance
  • Telecommunications


63. Are residents made aware of network services, ports, or protocols which are filtered, blocked, or otherwise restricted?

  • We are reactive - Residents are only made aware through mass communications (webpages, flyers, etc.)
  • We are proactive - We keep residents aware of services, ports, and protocols that are filtered, blocked, or restricted on an on-going basis (for example, email sent directly to them)
  • Residents are not made aware
  • Other (please specify)


64. In general, are residents permitted to operate servers on the residential computer network?

  • Yes, residents are allowed to operate servers with prior approval or permission
  • Yes, residents are allowed to operate servers without approval or permission
  • No, residents are not allowed to operate servers
  • Other (please specify)


65. Is there a formal grievance or appeal procedure for violations of or challenges concerning policies and restrictions governing the residential computer network?

  • Yes, we have a formal procedure
  • No, we do not have a formal procedure
  • Other (please specify)


66. Do residents have an individual bandwidth quota?

  • Yes, we have a non-published quota for each user
  • Yes, we have a published quota for each user
  • No, we do not monitor bandwidth consumption on an individual level
  • No, there is no set quota for individuals
  • Other (please specify)


<s>(Required) 67. Does your campus practice packetshaping or other Quality Of Service (QOS) restrictions on the residential computer network?

  • Yes
  • No
  • Not sure</s>


68. What packetshaping or other Quality Of Service (QOS) product(s) does your campus use on the residential computer network?

  • Allot NetEnforcer
  • Checkpoint Floodgate-1
  • Converged Networks (Sitara) QoSWorks
  • Emerging Technologies (ETinc) Appliance
  • Packeteer Packetshaper
  • A "homegrown" (self-developed) product
  • We do not employ packetshaping or other Quality Of Service (QOS) product(s) on the residential computer network
  • Other (please specify)


<s>(Required) 69. Does your campus have an online registration process in place that requires residents to register their computer before their connection is fully functional?

  • Yes
  • No
  • Other (please specify)</s>


70. Who developed your online registration process requiring residents to register their computer(s) before their connection is fully functional?

  • Bradford Campus Manager
  • Cisco switches with VMPS
  • NetReg (www.netreg.org - Southwestern University)
  • NetReg (www.net.cmu.edu/netreg/-Carnegie Mellon)
  • Perfigo
  • "Home grown" (i.e. developed in-house at your institution)
  • We do not require residents to register their computer(s) before their connection is fully functional
  • Other (please specify)


(Required) 71. Does your campus have a system in place on your residential computer network to automatically detect problematic (infected, unpatched, etc.) computers and quarantine them (to stop the spread of a virus, protect critically vulnerable computers, etc.)?

  • Yes, we have the ability to quarantine problematic computers but no automated or self-remediation process
  • Yes, we have the ability to quarantine problematic computers with an automated or self-remediation process
  • No, we do not have neither the ability to isolate problematic computers
  • Other (please specify)


72. Is your process integrated with an online registration system?

  • Yes, our detection or isolation system is integrated with our online registration system
  • No, our detection or isolation system is not integrated with our online registration system
  • We do not have an online registration system Other (please specify)


(Required) 73. Are residents required to install any security-related software on their computer before they can use the residential computer network?

  • Yes, residents are required to install security-related software and we enforce this primarily through technical measures
  • Yes, residents are required to install security-related software and we enforce this primarily through non-technical (judicial or educational) policies
  • Yes, residents are required to install security-related software and we enforce this through technical measures and non-technical policies
  • No, residents are not required to install any security-related software to use the network
  • Other (please specify)


74. What security-related software are residents required to install? (Check all that apply)

  • Anti-virus software
  • Client utility to verify settings, patch level, etc.
  • Firewall
  • Other (please specify)


75. Does your campus conduct active scans of the residential computer network to locate security threats or detect residents in violation of your policies and requirements?

  • Yes, we actively scan primarily to detect security threats
  • Yes, we actively scan primarily to detect residents in violation of policies and requirements
  • Yes, we actively scan to detect both security threats and policy violations
  • No, we do not conduct active scans for these purposes
  • No, we do not conduct active scans at all
  • Other (please specify)


76. Does your campus passively monitor the residential computer network to locate security threats or detect residents in violation of your policies and requirements?

  • Yes, we passively monitor primarily to detect security threats
  • Yes, we passively monitor primarily to detect residents in violation of policies and requirements
  • Yes, we passively monitor to detect both security threats and policy violations No, we do not passively monitor network traffic for these purposes
  • No, we do not passively monitor network traffic
  • Other (please specify)
Retrieved from "http://www.resnetsymposium.org/wiki/index.php/RARG:2008_ResNet_Survey:Security_and_Policies"
Personal tools
Navigation
Informational articles