ITEC 345 2013fall ibarland

home—lects—hws
D2L—breeze (snow day)

white-hat-agreement
White Hat Agreement
only use your power for Good!

As part of the course ITEC 345 — Introduction to Computer Security, you will be shown systems, tools and techniques related to Information Security. With proper use, these components allow a security or network administrator to better understand the vulnerabilities and security precautions in effect. Misused, intentionally or accidentally, these components can result in breaches of security, damage to data or other undesirable results.

Since these lab experiments will use RU machines, disk images hosted at RU, and/or resources hosted by providers such as Deterlab.net, you must agree to the following before you can participate. If you are unwilling to sign this form, then you cannot participate in the lab exercises and as a consequence lose points for the lab exercises. (See me if there are specific points which you object to, which can be reworded in a mutually satisfactory way.)

Turn-in instructions: Submit a signed and initialed copy of this form on D2L before starting hw03. You can either:

1. In a text editor, open or copy/paste the text of the Student Agreement Form (or use this plain-text version), type your name in the signature line (and initial were directed), and submit that file (plain-text .txt only — not .doc or .html). Since access to your D2L account is limited to you, submitting this way will suffice to show that your signature is authorized.
or,
2. Print the Student Agreement Form, then sign, then scan/photo the result, and submit the resulting image file (one page; jpg, gif, or png formats only).

Student Agreement Form

I agree to:

• examine only the special course accounts for privacy vulnerabilities (as applicable).
• report any security vulnerabilities discovered to the course instructor(s) immediately, and not disclose them to anyone else
• maintain the confidentiality of any private information I learn through the course exercise.
• actively use my course account with the understanding that its contents and actions may be discovered by others.
• hold harmless the course instructor(s) and my University for any consequences of this course.
• abide by the computing policies of Radford University and by all laws governing use of computer resources on campus.
  Initial:                  In addition, I have read Radford University's Acceptable Use Policy for University Computers and Information Technology Systems (about 2 pages)¹

I agree to NOT:

• attempt to gain root access or any other increase in my privilege on any University computing resource or any other computing resource (for which explicit authorization isn’t given).

  This includes among other things, editing the virtual image that is being provided to you even if you install it on your own private USB disks or any other storage unit.

• disclose any private information that I may discover as a direct or indirect result of this course exercise.
• take actions that will modify or deny access to any data or service not owned by me.
• gain unauthorized access to information to other users on systems I help maintain for them, and keep them apprised of (with informed consent) what information I could encounter during maintenance.

  E.g. even if you own the WiFi router used by your housemates, and they use your computer (on an account you create for them), that doesn't entitle you to read their documents without their informed consent. If you (say) might review what external hosts try to connect to your router, inform your housemates of what this means, and that you might become aware of the URLs of sites they visit.

• attempt to perform any actions or use utilities presented in the lecture and lab laboratory outside the confines and structure of the laboratories and the course, without the express informed consent of all the owners and authorized users of the system in question.
• utilize any security vulnerabilities beyond the target accounts in the course or beyond the duration of the course exercise.
• pursue any legal action against the course instructor(s) or the University for consequences related to the course.

Moreover, I am aware and give my explicit consent that my course accounts and systems on deterlab.net and university-owned virtual machines used for ITEC345 may be examined for security and privacy vulnerabilities by other students in the course as part of legitimate class exercises, with the understanding that this may result in information about me being disclosed (if applicable, and restricted to information only on the deterlab.net and itec345 virtual machines). This agreement has been explained to me to my satisfaction. I agree to abide by the conditions of the Code of Ethics and White Hat Agreement.

Signed:                                                                                  Date (YYYY.Mmm.dd):                                         

Printed name:                                                                       

RU Username:                               

home—lects—hws
D2L—breeze (snow day)

©2013, Ian Barland, Radford University Last modified 2013.Sep.15 (Sun)

Please mail any suggestions (incl. typos, broken links) to ibarlandradford.edu