IT Handbook - Directories - University of Cincinnati

• Send Spam to spam@uce.gov and then delete it.
• Report other e-mail abuses to abuse@uc.edu.
A thorough review of “How To Fight Spam” will help to understand the world of spam and how you can help
control it: http://www.uc.edu/infosec/info/fightspam.html
Social Engineering and Phishing Attacks
Social engineering is used by criminals to gain unauthorized access to a computer or secure building. This
is a non-technical intrusion that relies on people’s complacency regarding the value of the information
they possess and their responsibility to protect it. Social engineers’ ploys often involve tricking people into
breaking normal security procedures. Examples of social engineering behavior include the following:
• Someone calling on the phone asking for information such as a user ID and password.
• Someone “dumpster diving” to find memos, system manuals, and printouts of sensitive information.
• Someone pretending to be an outside consultant or temporary worker.
• Someone “piggy-backing” entrance to a building by following in an authorized person, thus avoiding
presenting ID. If you permit someone access, make sure you know who he or she is.
• Someone creating a persona that makes him or her appear to be a person in authority, so people ask the
hacker questions, rather than vice-versa. This is “reverse social engineering.”
• Phishing uses e-mail or web sites to solicit personal (often financial) information. Attackers send e-mail,
seemingly from a reputable credit card company or bank that requests account information. Often, the
message suggests that there is a problem that needs their attention.
• Learn more about phishing by watching this video: http://www.uc.edu/infosec/info/videos.html
Phone / PDA / Mobile Device Security Tips
• Set a password, lock pattern, or PIN on your phone to prevent unauthorized use and make it more difficult
to hack if stolen or lost.
• If your phone has Bluetooth functions, disable them until they’re needed, and then set visibility settings to
“hidden” so that your device cannot be scanned by other Bluetooth devices.
• Limit the amount of sensitive or personal information such as passwords and account information stored
on your mobile device.
• Consider purchasing anti-virus software for your phone and make sure it is frequently updated.
• Only download apps from trusted sources.
• Do not jailbreak your mobile device as this can open up security holes
• Treat mobile devices as you would your wallet, keys, or laptop; don’t leave them in plain sight and keep
them close to you at all times.
USB Drives / Thumb Drives / Jump Drives and other Mass Storage Devices
These drives are a very convenient and commonly used method to hold personal files and school work.
Unfortunately, the small physical size of these devices makes them easy to lose or to steal.
• If you use a mass storage device to store any important or sensitive data—class work, research data, clinical
information, personal files, etc.—make sure that the data is protected by encrypting the device.
• Many modern mass storage devices come with a security utility that can encrypt sensitive files.
• If you do not have encryption on your mass storage device, don’t keep sensitive information on it.
Social Media Safety
What is social media?
Social media refers to the means of interactions among people in which they create, share, and exchange
information and ideas in virtual communities and networks.
What are some examples of social media web sites?
Several social media sites have become extremely popular in the last few years for internet users of all ages.
Some examples include: Facebook, Twitter, LinkdIn, Instagram, and Tumblr.
What are some advantages of using social media web sites?
• Easy Information Exchange Facebook and similar sites allow users to gain access to personal information
very quickly, including home and cell phone numbers, addresses, photos, videos, and events.
78