Educause Security Discussion mailing list archives

Re: Keyloggers in computer labs


From: Graham Toal <gtoal () UTPA EDU>
Date: Tue, 7 Feb 2006 08:52:32 -0600

How are you protecting your computer labs from the installation of
keyloggers?   Lab managers want to use local administrator or
power user
accounts on these machines so that various applications run
properly, but of course, that exposes these public machines
to the possibility of anything being installed.  Re-imaging
or return point strategies such as Deep Freeze still leave
the machines vulnerable for a certain period of time.

What approaches are being used to protect public machines
other than not allowing privileged logins?

Have you considered locking down the machine completely, and
giving the students a fresh copy of a vmware image every
time they log in?  Let them install a keylogger on the
temporary image, won't do them any good.  Satisfies the
academics requests for allowing students to install
software.

G

Current thread: