Hebrew U. Link HUCA - NEWS




HUJI Policy Regarding Infected Computers

Due to the increasing number of machines infected by Viruses, we had to find a way to track machines that spread viruses, attempt to hack other machines, etc.

As we do not have a network-wide virus scanner, and there is no perfect antivirus software (they all fail to spot some virus or another), we decided to watch for anomalies caused by the viruses. We can detect anomalies in computers which are generating numerous connections in parallel. During normal usage your PC should create less than 10 concurrent connections; thus, we search for computers which create dozens and hundreds of connections IN PARALLEL.

Owners of such computers who access us via the remote access systems (dialup, ADSL, cables or VPN connection) receive a warning message and blocked till they clean their computer. Note that we do not check the exact cause of this behavior to avoid invasion of your privacy.

virus

Once in a while we get a reply "I've formatted my computer thus it is clean now"; this is a misconception. When you install a computer from scratch, you install the original version of the operating system with all the initial bugs that were detected and exploited since then. Thus your computer will get infected shortly after being connected to the network. You must install all the necessary patches before re-connecting it.

 


Last updated: 16/12/2014