Computer & Network Security

The ITS Technology Security Services group provides a wide variety of services to the general NYU community that help minimize the risk of a security incident. We meet with NYU departments to discuss their security concerns, provide consultation on new projects and educate University employees on how to safely and securely navigate NYU-NET resources. An overview of our services is provided below. For some important security recommendations, please explore the tabs above.

What We Do

• Incident Investigation
• Vulnerability Scans
• Education
• Research and Development

Incident Investigation

TSS responds to incident reports regarding the security of NYU's computers, data, and networks. Incident response includes tracking down infected computers, contacting external Internet Service providers, and monitoring network traffic for possible break-ins. TSS is involved in high impact incidents such as emergency response, sensitive data disclosures, serious network events, and when appropriate, participation in investigations conducted by either NYU Public Safety or external law enforcement agencies.

Vulnerability Scans

TSS continuously evaluates New York University's computers, networks, data, and personal workstations through a variety of methods, including general network scans. Upon request by Systems Administrators, our group will scan computers and networks to test for vulnerabilities and exploits.

Education

The TSS group actively seeks to develop greater security awareness by educating the NYU community on how to safely use a variety of technologies. We identify, research, and promote "best practices" regarding the security of data and systems.

Through various means, the TSS group instructs and alerts the general NYU community of security news and vulnerabilities. These methods include, but are not limited to, the Security Alerts mailing list, the Security Alerts section on NYU Home, and the Computer Security Alerts and Computer Security News web pages. Annually, the TSS group publishes important security articles in Connect Magazine.

As a result of research and development, we also implement new concepts for security training sessions and broader security initiatives.

Research and Development

TSS reviews existing and innovative communications applications and assesses secure applications for use at the University and in University projects. We also assist in instituting campus standards for security, and review applicable policies and procedures in the context of these standards.

What We Can Do For Your NYU Department

• Sensitive Data
• Security Applications
• Consultations
• Vulnerability Scanning
• Product Review
• Training

Sensitive Data

Do you have systems that house sensitive data such as student or financial information? You can check with us on making and keeping them secure. We can also answer questions on computer security compliance with Federal regulations.

Security Applications

We have security applications such as Tripwire, PGP, Anti-Spyware and Antivirus software available for you to protect your system.

Consultations

We can meet with departments to discuss security precautions and explain how to implement security policies. We can arrange confidential meetings with anyone who is concerned about potential security problems or harassment.

Vulnerability Scanning

If you manage office computers, we can scan your new computers in order to make sure that there are no vulnerabilities.

Product Review

If you're investigating a new product, we can help you make sure that it is secure and adheres to any University policies.

Training

We can recommend security-focused classes for system administrators and technical employees. We can also teach specifically tailored classes on security topics by request.

Page last reviewed: August 19, 2008