Administrative Services | - Information Technology Services - | Financial Aid | University Communications | Student Affairs | Additional Offices

Support - How Do I . . .?

Web Security

Learn about viruses

A virus is a piece of software code designed to operate on your computer without your knowledge or consent. The effect of the virus may be a simple pop-up message or it may destroy programs. Viruses are spread through infected e-mails, documents, and software. A virus is not inserted into data. It is a self-contained program or code that attaches itself to an existing application in a manner that causes it to be executed when the application is run. A virus must be executed in order to cause any damage. Macro viruses, although hidden within documents (data), are similar. It is in the execution of the macro that the damage is done. To avoid a virus, follow these tips:

  • Before opening an attachment, make sure that the message is coming from a trusted source
  • Keep yourself updated on network outbreak alerts
  • When downloading a file always consider the reputation of the server you are visiting
  • Disable macros in any document (e.g. Word doc.) that contains a macro language
  • Always have a anti-virus program with updated definitions installed on your computer. Denison offers McAfee Anti-Virus for free download.

Are browser plug-ins safe?

Some HTML pages may contain pieces of programming code that add extra functionality (e.g. a page that acts as a calculator). Although useful, these pose a greater security risk. To make your surfing more secure, browsers can be set to ignore potentially dangerous code.

1) ActiveX plug-ins are small programs are run by Microsoft Internet Explorer. Windows grants them virtually full control over your computer, posing a significant risk. It is recommended that you disable ActiveX if you regularly use IE.

2) Embedded scripts are programs executed by your browser. These scripts are usually written in JavaScript and are used for storing cookies on your hard drive or verifying data within a form. However, they can also be used in dagnerous ways that may send personal information to third parties. It is recommended that you disable embedded scripts. Note that some sites may not work correctly if JavaScript is disabled. You may need to enable scripts to view certain sites.

3) Java, not to be confused with JavaScript, is the programming language Java applets are written in. Browsers interpret this code and run applets within pages. Java applets are generally harmless, because by default they are not given access to the operating system. To gain access, Java applets may ask for more privileges. Grant privileges only to applets that come from reputable sites that you know to be safe.

What is encryption?

It is possible that any information sent over the Internet be intercepted by a third party. If the information is not encrypted, intercepted information can be interpreted by third parties. In web browsers, SSL (Secure Socket Layer) encrypts any communication between your computer and the server. Never send any private information (e.g. Social Security Number, credit card numbers, etc.) over the Web without having SSL enabled. To check whether SSL is enabled on your browser, if you look at the address bar. If the URL begins with "https://", SSl is enabled; if it begins with "http://", it is not. Encryption standards change over time, so more recent browsers offer better encryption. Visit Microsoft for browser updates.

Since email travels over the Internet, it is also subject to be intercepted if it's not encrypted. PGP is one free tool to securely encrypt messages. Although not required, consider using them if your correspondence is confidential.

Am I anonymous online?

A lot of information about you is available to web servers you visit. Visit privacy.net for more information on internet privacy. Given certain conditions and ActiveX enabled, even files on your hard disk may be able to be accessing from the Internet. Cookies, user tracking, and browser security holes all allow your information like your IP address to be accessable by third parties.

Anonymity is essential if you are using DSL, a cable modem, or a T1 line (like at Denison) because your IP address is fixed and you are easily matched to your computer. There are a number of online services, such as Anonymizer or SilentSurf, that can help you hide your real IP address or protect you from cookies and bad code. The free trial version of Anonymizer creates slower download speed and ad banners on top of pages. You may want to consider a subscription to Anonymizer's full service.

Proxy servers can also be used for anonymity by concealing your geographic location. When surfing, web pages are retrieved by the proxy server rather than by the individual browser. However, proxy servers don't deal with cookies, applets or harmful code. You should only use proxies when necessary. Working via proxy servers slows down data transfer rate and is an additional load on the network and the servers. For instructions on how to set up your browser to use a proxy server while online, click here.

Pick a good password

It's easy to store personal or important information online when creating web accounts without paying attention to password creation. Only the combination of login name and password protects your data from the rest of the world. New techniques emerge everyday that allow third parties to figure out passwords. When creating a password, keep in mind they should

  • contain both alphanumeric symbols and punctuation
  • be at least 6 characters long
  • not be the same as or related to your login
  • not be the same for all your accounts

What are cookies?

Cookies are small text files that web sites save to your hard drive. They contain information that is stored on your computer that web sites use the next time you visit a site (e.g. if you buy something on Amazon, the next time you visit the site you are greeted by your name). A cookie by itself is generally harmless: it is just a string of characters that the site will refer to. One type of cookie, a persistent cookie, is intended to stay on your computer for years and are used for permanently identifying your computer on the Internet. Over time, the information on these cookies grows and can store much information about how you use the internet, which can then result in targeted advertisement.

You should always read the site's privacy policy and find out what they intend to do with the information you submit. Opt out of email newsletters unless you are interested in that particular company's products. Newer browser versions allow you to turn cookies off completely or require the browser notify if a website is attempting to store a cookie. See JunkBusters for instructions on how to disable cookies.