by JoAnna Parker Martin

You may not be aware that traveling internationally greatly increases the risk of your information and device data being compromised, whether through theft or intrusion. These risks need to be evaluated, mitigated, and wherever possible avoided. The best way to do this is to plan ahead! In order to protect you, our community, and Rice resources from the risks associated with traveling internationally, the Information Security Office (ISO) recommends that the following specific precautions be taken.

Before the Trip

• Research the international requirements for each country you plan to visit. The State Department has travel safety information for every country on their website. Some countries have restrictions on encrypted devices. Familiarize yourself with your destination’s laws about technology and check especially for encryption import restrictions. Violating these restrictions can result in your devices being confiscated!
• Plan to take only what you absolutely need. Leave all unnecessary devices or equipment in the US.
• If you must take your data/device with you, follow these guidelines.
  • Make sure the operating systems and all applications are patched with the latest available versions.
  • Make sure devices have OS appropriate anti-malware packages installed.
  • Uninstall unused applications and turn off any unneeded background services since those can be used as possible “back doors” to get into your system.
  • Remove sensitive or confidential information from your devices before traveling. You can safely store data on university servers for later access.
  • Check if your device or devices, including externals such as thumb drives are encrypted.
  • Make sure that the password you use to get into your computer is different from the one you use with your Net ID and different from any other services you use. This will protect you in the event you are required to give up your encryption password at a border check.
  • If your destination country allows the use of VPN, use it when you connect to Rice resources. This will create a secure tunnel protecting your information. As of August 1^st, 2018 AnyConnect VPN  is the software to use for this purpose.
  • Change your NetID password before traveling and change it again upon return by visiting https://mynetid.rice.edu/.

All of these things can be done with the assistance of your divisional representative or by contacting the OIT Help Desk. Many of these steps require preparation and planning. The sooner you contact us before your trip, the better!

While Traveling

• Disable all wireless communication technology when not in use. This means Wi-Fi, Bluetooth, NFC, RFID, etc. The simplest and fastest way to accomplish this is by putting your device in airplane mode.
• Power off systems when not in use.
• Turn off “join wireless networks automatically” on all mobile devices. Avoid internet cafes and any wireless hot spots that ask to install any programs or certificates in order to use it.
• Use web-based resources while traveling when available (webmail, rice.app.box, etc.) using AnyConnect VPN.
• Make notes of anything that appears odd or unusual while using your devices.
• Whether using someone else’s or your own computer, never accept patches or updates while in foreign countries.

Upon Return

• If you traveled with your own mobile device or laptop, check for and install any OS or program updates before connecting back onto Rice campus systems.
• If you experienced any anomalies or suspicious activity, report it to the Information Security Office or the OIT Help Desk so that we can help you investigate. Please provide an itinerary or log of when during your trip these occurred. This can aid with investigation.
• Change any passwords used while abroad using a secure and trusted machine. Remember, sometimes a complex and unique password is the only thing preventing someone access to your information.

Ultimately you are responsible for keeping your risk low and the information and devices you use protected, as laid out by Rice University Policy No. 832. You can set your mind at ease about your devices and your data, both personal and university owned, by following these steps.

If you have any questions regarding these recommendations, please contact your department OIT representative, the ISO, or call the OIT Help Desk (713-348-HELP).

The passwords that secure our accounts guard some of our most important personal information. As part of good password security practice:

DON’T….  

1. Use birthdays, names, or dictionary words

2. Reuse passwords across multiple accounts                 

3. Make passwords too short (6 characters is not enough)       

4. Tell anyone else your passwords                                                            

5. Store passwords in plaintext                                                         

6. Use keyboard patterns, like “qwertyasdf”                                         

DO….

1. Create a unique, complex password for every account

2. Make passwords 12-16 characters in length

3. Use truly RANDOM sequences of characters!!!

4. Use a password manager, such as 1Password

5. Keep your passwords secret, even from trusted friends and family

But rules were made to be broken, you say!

So were passwords.