Security Resources:

Lead: Wayne Hyde

University of Florida IT Security:

• Basic Security Guidelines for Network Administrators
• Reporting an Incident or Vulnerability
• Links to various Security Web Sites

UF IT Worker Responsibilities:

• UF Information Technology (IT) Security Regulations
• UF IT Security Charter
• UF IT Security Policies
• UF Network and Host Security Standard and Procedures
• UF IT Security Incident Response Standard
• UF IT Security Physical Security Standard
• UF IT Security Risk Assessment Standard
• UF IT Security Training and Awareness Standard
• UF IT Security Continuance of Operations Standards

Incident Response:

• Windows Intruder Detection Checklist from the CERTŠ Coordination Center
• Reporting an Incident or Vulnerability
• IFAS Incident Response Toolkit (John Sawyer)
• IFAS Incident Response Toolkit Official Documentation (John Sawyer)
• Off-line infection scanning
• Discovery: Request network scan
• Blocking infected hosts

Local Admin Password Management:

• The Automated Startup Script Method
• Using the passgen utility from the Protect Your Windows Network book
• Frequently Asked Questions About Passwords

Least-privilege machine access:

• The LUA approach: running under least-privilege
• Co-managed Delegation: About OU Admin accounts
• Windows Vista User Account Controls
• Developer Best Practices and Guidelines for Applications in a Least Privileged Environment

Vulnerability assessment and patching:

• MS Security Bulletins
• WSUS within IFAS
• The IFAS Computer Startup Script
• Microsoft Baseline Security Analyzer : http://www.microsoft.com/technet/security/tools/mbsahome.mspx
• Microsoft Update: http://update.microsoft.com/microsoftupdate
• Windows Update: http://windowsupdate.microsoft.com
• Office Update: http://office.microsoft.com/officeupdate
• Techniques for Patching New Computers: http://www.microsoft.com/technet/desktopdeployment/articles/080305tn.mspx
• Repairing Windows Automatic Update

Security Videos for Users:

• These videos are designed for home users but there are several that you will want to forward on to your end users to help the realize the dangers of spyware, phishing and viruses.
• Here is another "fun" video you can show users about why using Windows Update and antivirus software is important. The "hacker" is lame but the point is made very well by watching the unprotected XP machine get brutalized.