This document describes how the UI Computer Science Department addresses its computer security needs. It is the official document of correct security practices and the plan for change within the department. It is a living document and is periodically reviewed and revised to meet Computer Science Department needs. All changes and updates are reviewed by the senior system administrator and approved by the CS faculty. Faculty, staff, and students may use the departmental computer networks to promote scholarship and learning for all students.
Ethical standards apply even when material is left unprotected.
Users are responsible for understanding and respecting the security requirements of the systems they use and for their own behavior. University and department computer systems and networks may not be used for any unethical, illegal, or criminal purpose. System administrators may suspend computer and network privileges of an individual for violations of this policy, or of local, state, or federal laws. A complete security assessment of department networks is planned for the 1999 spring semester. Two graduate students were sent to a specialized course in intrusion techniques and detection on networked systems presented by a major computer security consulting firm, and will lead the effort.