Computer Security
"I understand and appreciate the high level of computer security that the Law School deserves and expects. My team and I are dedicated to ensuring this high level of security always remains intact."- Pratike Patel, Manager of Network Services, Harvard Law School
AntiVirus Protection
Understanding Viruses
There are actually three types of computer viruses: true viruses, Trojan horses, and worms.
True viruses actually hide themselves, often as macros, within other files, such as spreadsheets or Word documents. [Note: Viruses can hide themselves in a variety of media: documents, email attachments, and so forth]. When an infected file is opened from a computer connected to the network, the virus can spread throughout the network and may do damage.
A Trojan horse is an actual program file that, once executed, doesn't spread but can damage the computer on which the file was run.
A worm is also a program file that, when executed, can both spread throughout a network and do damage to the computer from which it was run.
How Viruses are Spread
- E-mail: Most viruses are sent as e-mail attachments. These attachments could be working documents or spreadsheets, or they could be merely viruses disguised as pictures, jokes, etc. The attachment may have been sent by someone wanting to infect the network, or by someone who does not know the attachment contains a virus. However, once some viruses are opened, they automatically e-mail themselves to addresses in the user's e-mail address book, and the sender may not know his or her computer is infected. Most recently, viruses like "Klez" have taken the additional step of "masquerading" as another user from the infected user's address book. This means that the apparent sender of a virus may not have anything to do with the virus transmission.
- Disk, CD, Zip disk, or other media: Viruses can also spread via various types of storage media. As with e-mail attachments, the virus could hide within a legitimate document or spreadsheet or simply be disguised as another type of file.
- Software downloaded from the Internet: Downloading software via the Internet can also be a source of infection. As with other types of transmissions, the virus could hide within a legitimate document, spreadsheet, or other type of file.
- Instant messaging attachments: Although less common (so far!) than e-mail attachments, more viruses are taking advantage of instant messaging software. These attachments work the same as e-mail viruses, but they are transmitted via instant messaging software.
AntiVirus Protection at the Law School
Faculty, Staff, and Departments
- Running server and workstation antivirus software: All vulnerable Windows servers run Symantec AntiVirus (SAV). This software scans our file-sharing data stores looking for suspicious code. SAV is also installed on all Windows workstations. SAV scans all data on a workstation's hard drive. If it finds an infected file it will automatically attempt to clean it. If the file cannot be cleaned, SAV will notify ITS. ITS will then contact you with further instructions on how to clean the virus.
- Routinely updating virus definitions: HLS Windows workstations are configured to automatically check SAV servers for updated virus definitions everyday. If the user's workstation is turned off at the time, the update will occur next time the machine is turned on. NOTE: this only applies to HLS-owned, on-campus desktops. HLS-owned laptops will have the SAV stand-alone client installed.
- Routinely running virus scans: SAV routinely runs virus scans on your computer to ensure your computer is virus-free.
Please note: personal machines connected to the network, whether owned by faculty, staff, or students are not protected with SAV. It is imperative that people connecting to the HLS network install and configure an antivirus program on their computer. ITS User Services can assist with this process.
Students
Harvard Law School is committed to providing our students with up-to-date, secure, and reliable virus protection. As part of this commitment, we offer all currently enrolled HLS students a free copy of Symantec Anti-Virus (SAV). SAV is a full-featured anti-virus program designed to scan all internal and external drives, as well as all incoming and outgoing emails and attachments.
Click http://www.law.harvard.edu/administration/its/students/antivirus.php for installing and configuring SAV. This page also includes on how to schedule SAV to check for the latest virus definitions. This will ensure that SAV is continually updated to protect your computer from the latest virus threats. It is important to note that your computer should only have ONE anti-virus program installed. If you wish to download the free SAV client, please uninstall any anti-virus software you may already have on your machine.
Reporting a Virus
Even though all files on the servers and workstations are scanned, the possibility still exists that a new or well-hidden virus could infect your workstation or personal computer, and if not properly handled, it could infect the network.
The ITS User Services staff will attempt to notify all users of credible virus threats via e-mail. Because this notification will automatically go to everyone at HLS, there is no need to forward virus warning messages. On occasion, well-meaning people will distribute virus warnings that are actually virus hoaxes. These warnings are typically harmless; however, forwarding such messages unnecessarily increases network traffic and causes unnecessary alarms. If you receive such a warning and are not sure of its legitimacy, forward the warning to the Faculty-Staff Help Desk at hlshelp@law.harvard.edu. We will attempt to validate the warning and notify you and the community.
As stated, it is the responsibility of all HLS network users to take reasonable steps to prevent virus outbreaks. Use the guidelines below to do your part:
- Do not open unexpected e-mail attachments, even from coworkers.
- Never open an e-mail or instant messaging attachment from an unknown or suspicious source.
- Be cautious when downloading freeware or shareware from the Internet. If you do download files from the Internet you should scan them for viruses before opening them.
- If a file you receive contains macros that you are unsure about, disable the macros.
Notifying the Appropriate Help Desk of Suspicious Files
If you receive a suspicious file or e-mail attachment, do not open it. Call the Faculty-Staff Help Desk (5-0722) or Student Help Desk (5-9576) and inform the technical analyst that you have received a suspicious file. The technical analyst will explain the necessary steps to take or how to handle the file.
If the potentially infected file is on a disk, contact the appropriate help desk. They will instruct you on how to handle the disk.
After the technical analyst has neutralized the file, inform the person who sent/gave you the file that they sent/gave you a virus.
If the file is of critical importance to Harvard Law School, the ITS department will attempt to scan and clean the file. The ITS department, however, makes no guarantees as to whether an infected file can be totally cleaned and will not allow the infected file to be used on HLS computers.
Knowing your Computer is Safe
To make sure your computer is receiving the latest virus definitions from SAV:
PCs
- Right-click on the virus-scan icon located in the system tray. The icon will look like a yellow shield. (Note: the system tray is located in the bottom right corner of your screen.)
- Select "Open Symantec AntiVirus...".
- Look next to the "LiveUpdate" button and check that the date is no more than two-weeks old.
- If the date is more than two-weeks old, please contact the Faculty-Staff Help Desk.
Macs
- Click on the Symantec icon on the top toolbar.
- Select "Symantec AntiVirus" and then choose "Open Symantec AntiVirus".
- Make sure the date next to "Virus Definitions File" is within the page two weeks.
- If the date is more than two-weeks old, please contact the Faculty-Staff Help Desk.
Windows Updates
Once a month Microsoft releases critical Windows Updates that need to be installed on all PCs. When Microsoft officially releases these updates, ITS will download them, test them, and then inform the community of these updates.
These instructions explain how to *download* the latest updates. If you do not have an HLS-owned machine, you may need to *download and then Install* these updates.
If you have an HLS-owned machine, you will have the Automatic Updates feature turned on already. The only action required on your part is to install the updates. To install the updates, double click on the install icon from your system tray (either a yellow shield with an exclamation mark for XP users or a globe with the Window's flag for 2000 users. The system tray is located in the bottom right corner of your computer screen). Double click the yellow shield or the globe to install the latest Microsoft Updates on your machine (make sure you save and close any open files and applications). This will ensure that the updates are downloaded and installed on your machine.