色虎视频

4.01.1.2 Security

Level of Security

Unless otherwise guaranteed, users should regard the network communication infrastructure as not secure from invasive technologies. ITS policy will ensure the greatest degree of confidentiality possible.

Concealed Identity

Users may not intentionally conceal their identity when using University computing resources.

Protected Personally Identifiable Information (Protected PII)

Per the Code of Federal Regulations (CFR 2028, Title 2, Volume 1, Section 200.79 and 200.82), PII means information that can be used to distinguish or trace an individual’s identity, either alone or when combined with other personal or identifying information that is linked or linkable to a specific individual. Some information that is considered to be PII is available in public sources such as telephone books, public Web sites, and university listings. This type of information is considered to be Public PII and includes, for example, first and last name, address, work telephone number, email address, home telephone number, and general educational credentials. The definition of PII is not anchored to any single category of information or technology. Rather, it requires a case-by-case assessment of the specific risk that an individual can be identified. Non-PII can become PII whenever additional information is made publicly available, in any medium and from any source, that, when combined with other available information, could be used to identify an individual.

University students, faculty and staff are prohibited from sharing protected PII. Protected PII means an individual’s first name or first initial and last name in combination with any one or more of types of information, including, but not limited to, social security number, passport number, credit card numbers, clearances, bank numbers, biometrics, date and place of birth, mother’s maiden name, criminal, medical and financial records, educational transcripts. This does not include PII that is required by law to be disclosed.

Unauthorized Data Access

Users may not make or attempt any deliberate, unauthorized access to or changes in data on a University computing resource, for example to read personal communications of other users or to access confidential University files.

Security Compromise

Users shall not defeat or attempt to defeat or circumvent ITS security systems, such as by "cracking" or guessing user identifications or passwords or by compromising room locks or alarm systems.

Data Interception

Users may not intercept or attempt to intercept data communications not intended for that user's access, for example, by "promiscuous" wiretapping.

Denial of Service

Users may not deny or interfere with or attempt to deny or interfere with service to other users, e.g., by means of "resource hogging," distribution of computer worms or viruses, etc.

Personal Responsibility

Users are responsible for the security of their ITS accounts and passwords. Any user changes of password must follow published guidelines for good passwords. Accounts and passwords are normally assigned to single users and may not be shared with any other person without ITS authorization. Users must report any observations of attempted security violations.

Effective Date

Approved by Board of Curators: January 15, 2026