Saving users from themselves: creating an effective student-oriented anti-virus intervention

ABSTRACT

The proliferation of computer viruses, Trojans, and other malicious code in recent years has presented a serious challenge to higher education computer services support programs. Outside of higher education, most IT departments mandate anti-virus policies through central management of end-user systems and software. In an academic environment where student systems are owned by the users and not institutions, however, such an approach is not always tenable, and the weaker forces of user education, persuasion, and service level agreements must prevail.This paper describes the anti-virus intervention strategy devised and executed by FAS Computer Services at Harvard University during the 2000-01 academic year. The approach chosen focused on both providing innovative technical approaches to combating computer viruses and carrying out an intensive and targeted publicity campaign to carry the anti-virus message to every student on campus. In this paper, the rationale for the chosen approach is examined vis-a-vis rejected alternatives, and strategies and goals for future interventions are presented.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.4 System Management
          Subjects: Centralization/decentralization

Additional Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.4 System Management
          Subjects: Quality assurance
      K.6.5 Security and Protection (D.4.6, K.4.2)
          Subjects: Invasive software (e.g., viruses, worms, Trojan horses)

General Terms:
Management, Security, Theory

Keywords:
McAfee VirusScan, anti-virus, computer security, intervention, residential computing support, user services