Computer security

The security of the University computer systems and resources, and the data they contain, is of absolute importance.

Good computer security practices are essential to protect the interests of the University community. Good practices are also important to ensure the secure and safe deployment and use of ICT systems and services.

To protect yourself and other students from security breaches, you are personally responsible for using ICT in a secure and safe way. You must read the University ICT Statute, Policies and Standards carefully and comply fully.

Viruses and other malicious software can spread quickly across campus, destroying files in the process

• All personal Windows or Macintosh systems that connect to the University network must run up-to-date antivirus and anti–spyware software.
• You must scan all mail attachments and files on portable devices (eg, USB sticks) before opening them, and treat all email attachments with caution.
• If you connect a privately owned laptop which is infected to the University of Auckland wireless network, your access to the wireless network will be revoked without notice.
• If you have any doubt that the computer you are using doesn’t have anti-virus and anti-spyware software installed, please contact the lab supervisor or the IC Helpdesk.

Contact:
IC Helpdesk
Phone: +64 9 373 7599 ext 82333
Email: ichelpdesk@auckland.ac.nz

The University must comply with all applicable laws, including those relating to privacy, copyright, defamation, harassment, criminal behaviour, human rights and trespass.

Contact the AUSA Advocacy with any queries relating to the law and how it may apply to you.

Email: senioradvocate@ausa.org.nz
Phone: +64 9 923 7299

Visit the AUSA homepage

You are not permitted to download and install any software onto University computers without appropriate authorisation.

• Unmanaged installations can compromise the ICT operating environment and also constitute a security risk.
• All software installed on computers must be licensed.
• The use of unlicensed software (software piracy) is illegal and puts the University at significant risk of legal action.
• The downloading of any material whose copyright status is explicitly not allowed or which is unclear is forbidden. Unless the material clearly states that it is legal to download then you must assume that downloading it will breach the New Zealand Copyright Act 1994. This includes music, films, written material and TV series.

All serious information security incidents that could affect the wider University community, such as an email worm spreading or a suspected information security breach must be reported to the ITS Helpdesk immediately.

ITS Service Desk
Email: servicedesk@auckland.ac.nz

Information Security Officer
Email: security@auckland.ac.nz

Outside normal working hours please contact:

IT Operations
Email: operators@auckland.ac.nz

A phishing attack is when someone deliberately tries to obtain your NetID and password to use them in a malicious way. These individuals want your NetID and password to send spam or more seriously infiltrate the University’s network. Do not be tricked into giving away your NetID or password.

Most phishing is conducted by email. Some attacks are pretty obvious. For example, “Your mail box is over quota, please reply to this email including your NetID and password to get more quota”. Or you may be provided with a ‘link’ in an email that takes you to a form that asks for your NetID and password.

You will never be asked for your password by University staff - all such requests are fraudulent.

Another form of phishing is now occurring. You receive an email advertising a new University service that offers a free iPhone to the first 10 people to sign up. If you follow the link, you get a page that looks just like an official University style page and you are asked to login with your NetID and password.

Always be very suspicious of any link in an unsolicited email and be even more suspicious if that link asks you to login with your NetID and password. If there is any doubt do not login and contact the IC Helpdesk.

• Your NetID and password are only for you to know.
• You must never share your NetID and password with anyone, this is a disciplinary offence. This includes friends and family. You can not share your NetID and password with your parents so they can check your progress - this is not allowed under University policy.
• Use of your NetID and password is routinely monitored for abuse. If we see accounts being used from different places at the same time, this will be investigated.

You must comply with the ICT Statute 2007, Policies and Standards.

In an event of any infringement to the University ICT Statute, Policies or Standards, the University Disciplinary Statute 1998 outlines the procedures and sanctions to be taken. These include:

• warning
• formal written warning
• restriction or termination of access to University of Auckland ICT, the summary suspension of such access and/or rights pending further actions, including disciplinary action
• the requirement to provide compensation for any improper use of, or damage to, University of Auckland ICT
• disciplinary sanctions, which may include suspension or expulsion from a course of study.

Visit the Policies website