Recommendations for Mobile Users

wirelessguideΚινητά – Ασύρματες Τεχνολογίες

24 Νοε 2013 (πριν από 3 χρόνια και 8 μήνες)

72 εμφανίσεις





Recommendations

for Mobile Users

November 24, 2013

Environmental Scan
:

In August 2003 the LovSan virus also known as Blaster
infected

several hundred computers on
the DPS Network (DPSNet) and resulted in
an

interruption of computer services at DPS.

Several

hundred staff hours were
expend
ed
in the

clean
up of

infected computers and apply
ing

emergency
patches to all other Windows 2000 and XP computers.

DPS was protected from the Internet by its firewall, howev
er it is believed that the virus was
introduced onto DPSNet by a mobile user whose computer became infected while away from
DPS and

then

later attached to DPSNet within the firewall.

The menace of viruses will continue to grow and plague information techn
ology users as new
vulnerabilities are discovered and exploited.

The best defense for DPS is to be proactive in
managing our computer resources and establishing sound policies that close up security holes.

Statement of Problem:

While mobile and remote com
puting allows users to maximize efficiency and
productivity
, it
does create a very high degree of risk for DPS’ network
infrastructure
and
enterprise
data

applications
.


An evaluation of the LovSan virus’ impact at DPS has identified the following
risks an
d
problems
created by mobile users for DPS
.

I.

Mobile users
with

the
need
to check email or connect back to DPSNet remotely will have
to connect to the
Internet
for access
.

Connecting directly to the Internet using dial
-
up or
DSL/Cable mode
m exposes the mobi
le computer to v
iruses
, worms and

hackers.


A

mobile user’s computer could become compromised
while connected to the Internet
through their home connection,
and when
this machine is plugged back in to DPSNet it
could
potentially
attack other computers on D
PSNet.

II.

DPS
-
owned computers
and Personal Data Assistants (PDA’s)
provided to mobile users
are expected to be used for DPS business purposes only.

Personal use of DPS computers
places DPS in non
-
compliance with its license to use Microsoft desktop software.


Failure
to meet the mandates of the Microsoft
License A
greement may result in revocation of the

entire District

s

license and possibly hefty penalties as well.

Additionally, the installation
of unauthorized software is against DPS policies and procedure
s and may be
in

violation
of
software copyrights and licenses.

Recommendations:

I.

Additional software is required in order to
bring

the security of m
obile computers
to an
acceptable level
of risk
that
allows users to work
,

but
minimizes
the

chance of
comprom
ise while connected to un
-
trusted networks such as the Internet.


Antivirus
software must be installed and kept “up
-
to
-
date” at all times.

In order to be able to detect
the latest viruses, antivirus software must be configured
for mobile user
s

to automati
cally
update from the Internet as well as with the servers on DPSNet.


Mobile computers
should also be equipped with a desktop firewall to protect the computer
from threats

on


the Internet
.


Desktop firewalls protect
a

computer

s network connections from
u
nauthorized access

such as

hackers
who are constantly searching for new
computer
s to
compromise.

Windows XP and Apple OS X
computers have desktop firewall

s
oftware

built into the operating system to protect the machine.

A
ll other mobile computer
platforms

including Win
dows
2000 and 98 require third party software to provide
desktop firewall protection costing approximately twenty dollars per computer.

II.

In order to ensure copyright and license compliance, mobile users should be prohibited
from installing una
uthorized software which may also be
a source of viruses.


Additionally, users should be instructed of the policies and procedures governing the use
of mobile computers owned by the district and the expectation that they are to be used for
DPS business onl
y.

Anticipated Outcomes:

Mobile computers are a great value to DPS allowing users to work remotely and increase
productivity.


While mobile users often connect to un
-
trusted networks such as the Internet to
access email and information, they are

easily pro
tected through the use of antivirus and desktop
firewall software
.

As long as the antivirus and firewall software is installed and up
-
to
-
date, there
is little risk that mobile users will catch viruses from un
-
trusted networks and pass them onto
DPSNet.