![]() ![]() |
Secure is a strange word because there is no one-sentence explanation that defines it well. Perhaps the closest short description is "to be free from harm." Anything valuable that can be misused can benefit from some type of protection. Security refers to any measures taken to protect something. Examples of security in the real world include locks on doors, alarms in our cars, police officers.
What do you mean by computer security?
While this is a broad term that could even refer to protecting a computer
from physical theft, we usually use it to describe methods of protecting the
integrity of data stored on a computer. Increasing your own knowledge is your
best defense. As you learn the practical information about how criminals and
viruses gain unauthorized access, you can employ better means of protection.
Why should I be concerned?
Your time and your data are both valuable resources. It is common for a
hacker or a virus to use a security hole in your operating system to infect
your computer. Removing the virus and patching that security hole usually takes
a couple of hours. If your computer is infected with multiple viruses your operating
system (and potentially your data) could be damaged to the point where recovery
is difficult. The best policy is to keep your computer up-to-date. (We have
more specific recommendations linked from our main Security
page.)
Some data, like financial information and account numbers, medical history, race, and marital status is probably stored on computing equipment somewhere. Most organizations have their computing equipment connected to the Internet. This provides two ways (electronic and physical) that data can be stolen or damaged.
What is meant by an "attack" in computer terminology?
Internet connected computers have bugs and features that can be exploited
by remote computers. Lately, viruses begin infecting vulnerable computers on
the internet and then attempt to infect other computers. In other cases this
means someone impersonating you electronically or depriving others from access
(a "denial of service" attack). Denial of service attacks are the
electronic equivalent of vandalism. Impersonation is usually achieved by electronic
eavesdropping or installing a program on your computer designed to capture your
credentials (passwords, access codes, etc.).
Why do we require periodic password changes?
This is a practical example of what we can do to protect the integrity of
our systems. While some users say that they have nothing in their account or
email, they may not realize that a perpetrator can use their account as a lever
to gain unauthorized access to other UO systems and Internet connected systems.
We have a collective responsibility to help protect our systems and other Internet
connected systems. We are concerned with many issues including system integrity
and reliability for business use, and yours and others privacy. By forcing you
to change your password periodically, we can limit potential damage caused from
a perpetrator gaining unauthorized access to your account.