Security Management Guide (G06.24+, H06.03+)

Concerns for the User
Security Management Guide—522283-008
5-3
Protecting Your Terminal
Protecting Your Terminal
Whenever you log on, be sure that no one discovers your password by watching your
fingers as you type.
After you are logged on, the system associates your user name with your operations.
That is, the system checks that you are authorized to perform these operations. The
system can also generate an audit trail of the transactions associated with your user
name and password. Your security administrator can consult this audit trail later.
When you leave your terminal, lock it. If you cannot lock your terminal, log off.
The TACL command interpreter allows another user to log on to your terminal without
you logging off. Never allow anyone to do this. Always log off before letting someone
else use your terminal.
Because intruders can use any information you leave on a terminal screen, clear the
screen if possible. Also, dispose of any hard copy from your session. Even an innocent
logoff message can contain information useful to a clever intruder.
Discovering When Others Use Your Terminal
You might be able to tell if someone has logged on as you or used your terminal while
you were away:
•
If your application maintains a number that goes up each time you perform a
transaction, jot down the number when you leave your terminal and check it when
you get back. If it has changed, someone has used your terminal to access the
system with your user name and password.
•
If your system maintains a “last logon” or “last transaction” date and time, check
that value as well. Report anything unusual to the security administrator
immediately.
Protecting Printouts
Many break-ins involve the use of some discarded printout. Therefore, take steps to
protect your printouts. Be sure you understand the policies and guidelines about:
•
Which printouts you are allowed to generate
•
Who can request a printout
•
Who can see a printout
•
How to dispose of unneeded or leftover printouts
Logging Off
Logging off tells the system you are no longer using the terminal and prevents others
from using your privileges to perform operations that are traceable to you.