About Secure UD
The Secure UD Initiative is the University's comprehensive, community-oriented information security initiative. It encompasses requirements and guidelines for protecting the University and its community as well as training and general awareness about topics in information security.
You are encouraged to use the resources on this website to learn more about Secure UD, including how it can help you protect your information, our community, and our University against cyber attack.
New security tools, services, and announcements
The Secure UD Initiative includes several security tools and services made available by IT for the benefit of the University community. The newest Secure UD services are listed below; for more information, explore the complete list of security tools and services.
Shopping online this holiday season? Find sales, not scams.
The holiday shopping season—beginning with Black Friday and Cyber Monday—is the busiest season for both retailers and cybercriminals. As the US government’s Computer Emergency Response Team (US-CERT) reminds us, “Online shopping has become a popular way to purchase items without the hassles of traffic and crowds. However, the Internet has unique risks, so it is important to take steps to protect yourself when shopping online.”
Make sure you're not giving away your credit card numbers, bank accounts, or identity while you're shopping online over the Thanksgiving holiday. Learn to spot and avoid crooks' favorite tools, such as fake retail websites, phishing scams, malicious “special offers,” and more.
Take action! Protect yourself and your identity this Black Friday: read the entry about holiday shopping scams in the Secure UD Threat Alerts blog.
2FA to be required on HR, payroll, other confidential online forms
Two-factor authentication (2FA) is a simple way to protect your UDelNet account and the information it contains. It helps block unauthorized access to your account by adding an extra layer of security to the traditional username-and-password login process. Over the past year, the University has been adding 2FA protection to more services (e.g., VPN in June). As of mid-November, over 8,000 members of the University community have signed up for 2FA protection.
In early February 2017, 2FA will begin protecting online HR and payroll forms that employees use to submit confidential information (bank accounts, SSNs, private contact information) and forms that students use to process certain financial aid transactions. By adding the requirement that people use 2FA to access these forms, the University is reducing the risk that students’ and employees’ financial accounts and personal information could be compromised. All UD employees are encouraged to sign up for 2FA before February 6, 2017.
Take action! Learn more about 2FA and enroll today.
Complete your 2016 Secure UD Training
Secure UD Training uses short, topical training videos to address key ideas in information security. These training videos are convenient enough to fit into a deskside lunch break or between emails. Better still, the lessons they teach are applicable both in the workplace and beyond. Employees are encouraged to complete Secure UD Training to better equip themselves to face cyber threats in their personal and professional lives.
Almost 2,500 employees have started or completed phase three of Secure UD Training, released in September. If you have not already done so, we invite you to join your colleagues in creating a culture of security awareness at UD by completing your Secure UD Training.
Take action! Complete Secure UD Training.
Password complexity improvements
The University's password complexity requirements have been updated. New passwords must contain a minimum of 12 characters (previously 8) and pass a preliminary dictionary check that ensures that they don't contain obvious University-related phrases.
Beginning in November 2016, members of the University community will be required to change their passwords every 15 months.
Take action! When you reset or change your UDelNet password, choose a strong password or passphrase.
PIN retirement
Previously, members of the University community could access their UDelNet accounts by logging in with their ID numbers and PINs. In order to provide greater security for your UDelNet account, PINs are now being phased out in favor of more secure passwords.
Take action! Complete the PIN retirement process to further protect your UDelNet account.
Two-factor authentication (2FA)
2FA is a simple way to protect your UDelNet account and the information it contains. It helps block unauthorized access to your account by adding an extra layer of security to the traditional username-and-password login process. It helps ensure that your account can't be misused by hackers or phishers. Every member of the University community is encouraged to enable 2FA for their own protection.
Take action! Enable 2FA protection for your UDelNet account.
Virtual Private Network (VPN) protection
A VPN connection allows you to remotely, securely access University systems and resources.
Beginning on June 15, the University will require that people use 2FA when using VPN connections to remotely access IT resources. Additionally, on June 15, faculty, staff, and students who log in to Copland or Strauss from off campus will be required to use a VPN connection.
Take action! Use VPN to securely access IT resources from off campus.
Upcoming security tools and services
IT has planned additional security tools and services that will further protect the University and its community from cyber attack.
Secure UD Student Agreement
Previously, new students completed a brief educational quiz prior to creating their UDelNet accounts. This quiz, the Electronic Community Citizenship Examination (ECCE), focused on topics in responsible computing at the University. ECCE has been phased out in preparation for the Secure UD Student Agreement, an updated exercise that will better ensure that all students are aware of their computing privileges—and responsibilities—at the University.
Want more information?
Start protecting yourself and your information by following the guidance below:
- Getting Started: A quick guide that introduces you to key ideas in computer and information security.
- Secure UD Essentials: The top recommendations for computer and information security. Follow these practices and you'll be off to a strong, secure start!
- Best Practices: A set of more detailed guidance for protecting yourself, our community, and our University from cyber attack.
These guides are written for all audiences: technical or nontechnical, employee or student. Anyone can get started with computer and information security. Everyone is responsible for protecting themselves and the IT resources they use.
If you have questions about the Secure UD Initiative, check the Frequently Asked Questions (FAQ) or contact the IT Support Center for assistance.
