Security

The Information and Communication Technologies Area (ICTA) provides certain services related to security on the web and computer systems. The objective of this service is to provide assistance to users of the USC web in the prevention and solution of security problems or incidents.

In this page, you will find tools and documentation in order to improve system security and methods to follow in case of incidents.

We beg you to pay much attention to the recommendations found on these pages. Do not forget that having equipment connected to the USC web implies, besides your rights, certain obligations. Each person is responsible for the wrong use that can be done of his/her computer, of his/her mailbox, or of any other available web resource.

The services that the ICTA expects to offer in the security field are the following ones:

Information spreading

It is carried out through these web pages and the ICTA-NOTICE  mailing lists (to receive notifications on threats and security incidents). You can obtain more information about the general running of the mailing lists in USC distribution list service

Support to users

Through the e-mail address seguridade@usc.es we deal with enquiries of USC web users on security.

Audit execution and security policies introduction

Those departments or centres with special needs or wanting to introduce a security policy can count on the Data Network Unit support to carry out these initiatives. These tasks will be developed automatically by the Data Network Unit in those systems and web points considered relevant.

Incident analysis in the USC web

Our web is provided with several probes used to track the traffic and help prevent security incidents. But it is also very important that users notify intrusion attempts, since it is very likely that others suffer the same kind of attack.

Processing of incidents with institutions different from the USC

In these cases, we will channel actions through the Iris-CERT, which is the security service of RedIris (Spanish Academic and Research Network). In this way, we can reach the organization causing the problem and clear up the matter as far as possible.