Securing the operating system only protects you from
"remote" exploits. You also need to secure your office,
lab, machine room, and other areas that house your computer
systems.
- Lock the door.
- When you aren't around the computer, you should lock the door to
defend against someone coming in and stealing the computer or
its peripherals. Any dedicated computer rooms should be on a
seperate master key than the offices and/or classrooms.
- Lock the keyboard
- If you aren't sitting at your keyboard, be sure to
"lock" it. Many screen-savers some with a
password-protect feature, while many servers come with a
"keyboard-lock" key. Use whichever is available for your
platform and/or operating system.
- "Nail down" the computer.
- If the room cannot be locked (ie, labs or cubicles), the
computer should be secured to the desk and to prevent the case
from opening. Several security vendors sell locking case screws
and security chains. CLASnet regularly uses products from these
companies to secure hardware:
and you can also use other vendors or make security cables
from parts available at hardware stores.
- Locate the computer safely
- Do not put computers on the floor. Flooding can occur on any
floor in any building, and machines on the floor can be damaged by
as little as one inch of standing water. Also, do not put
computers on window sills or directly under a window, since rain
sometimes leaks in during storms.
- Don't leave written passwords laying around.
- Don't leave "account cards" or slips of paper with
your password around your desk. You'd be surprised how easy it is
for someone to remember that password, and use it later.
- Turn the monitor away from the entrance.
- Be sure to situate the monitor so you can see someone entering,
rather than them seeing you. You don't want a person entering
the room to be able to see you typing your password.
Last updated: Dec 01, 2005 (01:39:06 PM EST)
URL: http://www.clasnet.ufl.edu/security/physical.shtml