Are you safe?

Every new technology emerging in society begets a public concern for security. While the Internet has completely revolutionized the way the world functions in terms of communication, commerce and entertainment, it also has brought security issues to the forefront. \nThe Internet has brought new terms like "hacker," "firewall" and "encryption" into the public mindset as more and more computers are inundated with intrusive schemes to reach individuals. \nFrom software to block pop-up ads on personal computers to programs used to scan computers for threatening viruses, IU students have a plethora of security options to pursue in order to keep their information private and safe.\nMark Bruhn, IU's chief information technology security and policy officer, is responsible for a team of people who are committed to helping University Internet Technology Services and other departments secure IU's networks and computers.\n"Students must understand that programs they download and some sites that they visit contain things that they don't want on their computers," Bruhn said. "Viruses and worms, but also Spyware and other programs, could harm their computers and put information they send at risk. Students should have anti-virus software active and updated, and they should have Ad-Aware and SpyBot both installed and actively looking for malicious programs." \nThe number of software programs available to protect Internet users is nearly limitless. However, IU students can download Ad-Aware and SpyBot, as well as other software, for free from the University by visiting www.iuware.iu.edu.\nIn addition, the UITS Web site offers information for students who have questions or concerns regarding software and hardware, training and workshops, information systems, security, and policies.\nOne of the biggest technological concerns students encounter around Bloomington is the "always-on" connection that is becoming more commonplace among Internet users. \nCable modems, DSL and T1 lines, which are very common in many of the dormitories on the IU campus, are more susceptible to attacks than dial-up 56k connections.\n"Broadband connections are always on and have addresses," said Jean Camp, an associate professor of informatics and associate director for the Center for Applied Cybersecurity Research. "Broadband systems are more valuable, and once an attacker has subverted one of those machines, the attacker can re-sell it." \nAs an additional safety precaution, students are recommended to frequently change their passwords so as to prevent anyone from potentially obtaining their personal information or breaking into their computer. Refraining from opening unsolicited e-mail and downloading documents that are suspicious can also help to keep students' personal computers virus-free and prevent the spread of a virus.\n"Once released, (worms and viruses) become like germs in an environment where there are always new people to infect because not enough people have patched their machine," Camp said. "Protecting your machine against endemic malicious code is as common sense as taking an Hepatitis shot when traveling to areas where it is endemic."\nAs students make more purchases online for various items and services, the risk of personal and financial information leaking to outside sources is certainly present.\nJunior Elizabeth Rosenberg, who uses anti-virus software and abstains from downloading music online, expressed a fear of her credit card number becoming public information. \n"I am concerned that someone could steal my credit card information when I am making a purchase online," Rosenberg said.\nReading companies' privacy policies before making online purchases can help to keep private or personal information safe. \n"Students should be careful where they put personal or important information. Companies like Sears or Kmart, or other well-recognized companies, may be perfectly safe to put your credit card on their Web sites, but other unknown sites may not be as trustworthy," Bruhn said. "Minimally, students should look for or read a Web site's privacy/security policy before they send personal information to a Web site."\nAs Web sites have become more diverse, Internet users who surf the 'net might be oblivious to what Web sites are more unsafe, insecure, and could potentially harm them and their computers.\n"Connections to Web sites that have in their address 'https' instead of 'http' are more secure," Bruhn said. "You can also tell these because they have a closed lock or an intact key on your browser frame somewhere. These indicate that whatever you are sending to that Web site is encrypted on the Internet and so cannot be intercepted and read by someone else." \nAlthough students can take control and protect themselves and their computers, organizations have also been created to ensure certain Internet security guidelines are being followed by Web sites.\nAs the Internet continues to change and progress, security will remain a prominent issue.\n"Right now, the parties most able to make investments in security have the least incentive, and the people with the most incentive have the least ability," Camp said. "The economics of computer security are backwards. If software producers had some liability for preventable computer security failures, there would be fewer security failures."\n-- Contact staff writer Mike Savitt at mpsavitt@indiana.edu.