CyberSecurity

OEC can help you improve your cyber security stance, whether it is in your Research Lab, at your office, or in a server room on campus. Our Infrastructure team and Desktop team have years of experience working with a wide variety of customers and their unique needs across campus.

OEC Service Catalog: https://oec.ucsd.edu/service-catalog

Here at UC San Diego, we all work together to create a safe computing environment. From taking the yearly Cyber Security training and restarting our computers for security patches to complete, to setting secure firewall rules and registering equipment with campus Hostmaster, there are many ways that we can positively affect the health and security of not only our own computers and data, but everyone else's.

The desktops/laptops that OEC provides for our Core Customers have:

- secure management software, with managed OS/software updates
- up-to-date antivirus and vulnerability scanning software
- active host firewalls with managed rulesets
- local hard drive encryption
- Authentication security through campus Active Directory

Things that each one of us should be doing to protect our own systems, and by association, protect other systems that connect to the campus network

- Install antivirus/antimalware and resolve known vulnerabilities - Qualys and Trellix - these protect your systems, and surface configuration issues and software that needs to be patched, to better protect systems
- Regular patching of OS and installed software, reboots to complete patch installation
- Working with IT to resolve configuration issues that leave your computer open to attack (based on Qualys scanning results)
- Backup your data! (know what your data security requirements are)
- Secure Passwords on all systems
- https://blink.ucsd.edu/technology/security/certification/five-steps-to-cybersecurity.html

Campus CyberSecurity systems work together, in a multi-faceted approach to securing our network

- Antivirus alone is not enough to protect systems - locking the front door but leaving the window open
- Perhaps you think you don’t have data on your campus-connected computer that needs protection, but note that if your computer does become compromised, that makes it easier for attackers to gain access to other systems on campus
- Each method of protection is important, and these can come together to provide correlation and visibility into the larger threat landscape, at the campus level
  - - Qualys Cloud Agent - Vulnerability Management software
      - Campus licensed, should be installed on all computers that can run it
        Scans the system for known vulnerabilities from the “inside”
        Reports on unpatched software, software configuration that is problematic
    - Trellix Endpoint Security - Threat Detection software
      - UC licensed, should be installed on all computers that can run it
        Scans the system for viruses, antimalware
        Can quarantine viruses, antimalware
        Reports on any viruses or antimalware that is found
  - Along with many other methods of protection (Qualys Network-based vulnerability scanning, firewalls, secure authentication, VPN, DUO, account lifecycle management, end user diligence and cybersecurity awareness)
  - OEC has a variety of additional methods in place to scan and protect our own infrastructure and networks (server and network scanning, system configuration management, standardized and managed security profiles, active network monitoring)

Campus Antivirus / Antimalware / Vulnerability Scanning Initiative - Cybersecurity Operations Group

UC San Diego is in the process of rolling out security software to all eligible computers on the campus network
Antivirus / Antimalware product: Trellix Endpoint Security (HX) (Previously FireEye)
Vulnerability Scanning: Qualys Cloud Security Agent
If you have a computer connected to the campus network, and do NOT have this software installed, please contact OEC for the latest installers: oec@ucsd.edu

Campus CyberSecurity Resources

Campus Licensed Antivirus: https://antivirus.ucsd.edu
Campus Network Security - https://blink.ucsd.edu/technology/security/services/index.html
DUO 2-Step - https://blink.ucsd.edu/technology/security/services/two-step-login/index.html
CMMC - Research Lab Cybersecurity Certification - https://assure.ucsd.edu

Campus Security Policies & Standards

Campus Minimum Network Security Standards - http://blink.ucsd.edu/go/meetstandards
Campus Network Security Policy - https://adminrecords.ucsd.edu/PPM/docs/135-3.HTML
UC Electronic Communications Policy - https://policy.ucop.edu/doc/7000470/ElectronicCommunications
Data Protection Standard - https://security.ucop.edu/files/documents/policies/institutional-information-and-it-resource-classification-standard.pdf
Data Protection Levels - https://security.ucop.edu/files/documents/uc-protection-level-classification-guide.pdf