EMAIL IS THE NUMBER ONE WAY TO GET A VIRUS

Is the email asking you to login to my.liu.edu or outlook.liu.edu?

Please make sure you see the green lock/green link as shown in the picture below before you enter your credentials to login into
MyLIU or Outlook.

Red Flags:

1. Is the email scaring you into losing something?
2. Is the email stating something that did not happen?  i.e. a friend request on social media, a TV you didn’t buy on Amazon, etc.
3. Is there an attachment of any kind?
4. Is the email sender new, in a leadership position, or not recognized?
5. Is the type of email normal, something new, or requesting you do something new?
6. Does the email message sound “too good to be true”?

Normal Actions:

1. Did you use the “hover” technique on links in the email BEFORE clicking them?
2. The “hover” technique means putting your mouse cursor over any links, waiting, and verifying the link matches the pop-up link in the email message.
3. Did you verify the email address isn’t spoofed (fake) by double-clicking the email sender address and verifying it matches.

Suspicious Email Actions:

1. Forward the message to IT to verify it’s legitimate.
2. Call the sender using a trusted people directory for their number, especially if they are a new email contact.
3. Do not follow suggested actions in an email without understanding why you would do them.

Why Encrypt?

Encrypting your laptop and desktop computers and mobile devices is the single most important step you can take to protect your personal information, and LIU’s data, in the event that the device is lost or stolen.

What To Do

1. Change your MyLIU password

If you suspect your MyLIU email has been compromised or stolen, change your password immediately to limit access to the account.

1. Change your MyLIU password.
2. Set new security questions if you had previously set them in MyLIU Account Management.

If you suspect a personal account has been compromised, change the password for that account. Choose a strong password and make it unique to that account. Do not use the same password for multiple accounts; that puts all your accounts at risk if one is compromised.

2. Report it

If you suspect your MyLIU email has been compromised or stolen, report it.  A compromised MyLIU email account is considered an IT security incident that should be reported.

If you suspect a personal account has been compromised, check the account documentation to find out how to report the compromise.

3. Monitor your accounts

Check your MyLiu email for suspicious activity. Make screen shots showing any settings that have been tampered with to include in your report of the incident to it@liu.edu

• Check activity on your account by clicking the Details link at the bottom of your inbox (when accessing your mail from a Web browser). See Google’s Last account activity help. Click the Sign out all other web sessions button if you see suspicious activity.
• Check the Trash and Sent mail folders for messages you didn’t send or delete.
• In your Mail Settings, review Forwarding and Filters and delete those you don’t recognize.
• In your Mail Settings, under Account, check the settings for Send mail as and Grant access to your account to be sure these have not been changed.

Learn more about monitoring and securing your Google Mail, as well as about protecting your personal information and privacy, at Google: My Account.

Check your other MyLIU services for suspicious activity.

• For example, look for files in your online storage space that you did not put there.

Copyright infringement is the unauthorized copying, storing, displaying, or distributing of another’s intellectual property without the express permission of the copyright owner. In the file-sharing context (peer-to-peer or P2P shareware programs), downloading or uploading another’s work product without authority constitutes an infringement, and is prohibited by the federal Copyright Act of 1976 and Digital Millennium Copyright Act of 1998.

Penalties for copyright infringement are both civil and criminal in nature. For civil violations, individuals may be ordered to pay actual damages or statutory damages of not less than $750 and not more than $30,000 per infringement. For willful infringement, awards of up to $150,000 per incident may be granted; criminal penalties include imprisonment for up to five years and fines of $250,000 per offense. Attorney’s fees and costs may also be assessed. For more information, see www.copyright.gov, and www.copyright.gov/help/faq.

Users of University IT resources may use only legally obtained licensed data or software and must comply with all applicable licenses, copyright, trademark and other intellectual property laws. Much of what appears on the internet or is distributed via electronic communication is protected by copyright law, regardless of whether the copyright is expressly noted. Users of the University computer resources should assume that material is copyrighted unless they specifically know otherwise, and may not copy, download or distribute copyrighted material without permission. Protected material may include, among other things, music, movies, text, photographs, audio, video, graphic illustrations, and computer software.

The University continues to use appropriate technology to reduce and/or eliminate the practice of illegally sharing copyrighted materials. Known vectors used to share files are blocked from the campus. In addition, students are bound by existing University policy that specifically prohibits the use of copyrighted material without the permission of the copyright holder. Violators of the policy are subject to removal of network access and referral to the appropriate disciplinary body.

A list of legal downloading sites is available here: www.educause.edu/legalcontent. The University encourages all students and staff to take advantage of these resources.

It is the responsibility of every person who uses University IT resources to download or upload data to make sure that copyrighted work is not misappropriated, and that all necessary permissions are obtained from the copyright holder.

To ensure the continued integrity of its information technology resources, facilities and controls, the University may audit, inspect and/or monitor network or resource usage, at any time, without notice. The University may limit or terminate the network access of any user who is in violation of any University or Information Technology (IT) policies.

Examples of improper use include, but are not limited to the following:

• Unauthorized access to network or electronic data in any form;
• The use of another’s password or account;
• The use of University data, networks or IT resources for commercial or political purposes;
• The unauthorized alteration of electronic files, including any disruption or interference (hacking / spam / viral programs);
• Software license or intellectual property violations;
• The violation of any University policy, local, state or federal law, harassment or defamation.

Users with access to confidential, privileged or financial data protected by law or University policy must adhere to the following security requirements:

Desktop security: All computers must be secured and non-approved software removed. Only approved software may be installed. Individual users on administrative systems may not add or remove software without Information Technology involvement. USB ports will be disabled to prevent the transportation or misuse of confidential information.

Internet: Internet browsing will be limited to approved, business websites by unit Directors. Personal webmail such as Yahoo, Google, etc. is not allowed.

Passwords: Frequent password changes will be required using unique combinations of alphanumeric and character sets such as “#, !” and so forth. Staff must not share passwords.

Remote Access: Remote access will be limited to LIU-owned computers utilizing virtual Citrix software that prevents the accidental transfer of information. All remote access must be authorized for business operation continuity purposes and approved by a University Officer.

Laptop security: Laptop use is not authorized for persons with access to extremely privileged information due to the risk of loss and associated threat of security breach. When laptop usage cannot be avoided, strong data encryption must be applied.

The University may also restrict unlimited electronic access. If an imposed limitation interferes with a user’s bona fide educational or research activities, the user may direct a written request for a waiver to his or her Department Chair, who, on approval, shall forward the request to the appropriate Dean for review. The University reserves the right to limit the use of information technology resources based on institutional priorities, technical capacity and fiscal considerations.

Article 156 of the New York State Penal Code and federal law (18 USC §§ 1030, 1302, 2252, 2501) impose criminal sanctions for certain offenses involving computers, software and computer data, including unauthorized use, fraud, computer trespass, computer tampering and unauthorized access to student records. Misuse of the University’s information technology resources is subject to disciplinary and/or legal action.