File Sharing Security Issues
File sharing is part of Microsoft networking and other operating systems that enables you to share files with others on your network and the Internet. Most people are not aware that their open shares can be viewed (browsed) and used (read/write/delete) by anyone on the Internet if they do not choose to use a password on their file shares or set up the file sharing correctly.
Most peer-to-peer music, video, and other anonymous file sharing programs also open a shared folder for others on the Internet to search and distribute files.
Risks:
- Open file shares are a method used by some Internet trojans and viruses to transmit and infect users.
- Others on the Internet may be able to view or use (run/delete/write) files on your computer hard drive.
- The computer may be used for distributing files (e.g., music and video) using peer-to-peer file sharing programs. This is in violation of the University Acceptable Use policy if copyrighted material is provided without proper permission from the copyright owner. ( http://www.policy.umn.edu/groups/ppd/documents/policy/Acceptable_Use.cfm)
How to mitigate the Risk:
- Disable file sharing.
- For those that require file sharing, password protect all shares and run up-to-date antivirus software.
- Do not install peer-to-peer music, video, and other anonymous file sharing programs. If peer-to-peer file sharing programs are needed, disable outbound sharing on the peer-to-peer software. For information on disabling the outbound sharing, see http://security.uchicago.edu/guidelines/peer-to-peer/
For University owned computers:
- For almost all University computers, file sharing should be disabled.
- For the few that need short-term file sharing, use passwords and antivirus scanning.
- Peer-to-peer file sharing programs (e.g., Kazaa, Gnutella, etc.) are considered a security risk and should not be installed unless authorized.
Resources:
If you have any questions, call 612-301-4357 (1-HELP) or send email to help@umn.edu.
