Purpose of Policy

Several times in the past, the campus network was made unusable by client computers with worms and/or viruses. These computers disrupted the network to the point that it could not be used. This policy was created to identify steps Bradley University will take to proactively protect our network, servers and client computers from network worms and viruses. The goal is to maintain network services despite active Internet worms and viruses.

The Computer Scanning Policy expands upon but does not conflict with the Computing Services Policy on Confidentiality of Information. Scanning will be completely automated using software and nothing on the computer will be changed. No private information will be examined.

Scanning

When a computer is added to the Bradley network, IRT will require registration of the system before network resources can be used. On a regular basis, all systems will require updated registration. In the registration process, the computer will be scanned in an effort to determine if it is infected or is vulnerable to worms or viruses. If IRT detects a problem, the system will be restricted to a troubleshooting network zone until its deficiencies are corrected. The Technology Helpdesk is a resource the Bradley community can use to correct identified problems. The infected, compromised, and/or insecure system will not be permitted back on Bradley's network until all problems are corrected.

• IRT will randomly scan all computers on the network periodically to determine if they continue to be safe from network hazards.
• Occasionally IRT staff receives advanced notice of a new network vulnerability. IRT will perform a network scan to detect the systems vulnerable to get them patched before a problem occurs.
• IRT will maintain a web site, http://scan-me.bradley.edu/, which can be used at any time for Bradley computer users to determine vulnerability to attack.

The scanning system will look for the following items:

• Critical security operating system patches
• The presence of known exploitable vulnerabilities
• The presence of known viruses or worms
• The presence of Bradley University approved anti-virus software (Norton Anti Virus)
• Current virus definitions

IRT will maintain logs of the results of computer scans and use collected information for statistical purposes.

The network threat environment is continually changing. With the Provost's approval, IRT may adjust the scanning process and/or policy as different threats emerge.

Approved: 07/06/04
Last Updated:

Page managed by Mona Hutchison