Security

Welcome to the Network Security website at the IAS

Brian Epstein standing in front of Fuld Hall at the Institute for Advanced Study.

This website brings you the latest news, how to's, tools and resources in Information Security. Security Awareness for our Faculty, Members and Staff is key in creating a safer computing environment.

The three major Principles of Information Security, Availability, Integrity and Confidentiality, will be covered throughout the security awareness program at the Institute. For a description of these principles, please see our About section.

In keeping with the spirit of the Institute, I encourage questions and open discussions about security. And if you discover anything out of the ordinary, please feel free to bring it to my attention so that we can work together to create a more productive, safer environment.

Thanks,
Brian Epstein <security@ias.edu>
twitter: @epepepep

Recent Blog Posts

A circular seal with a blue background of gray ones and zeros, a gray key centered with the white letters IAS across. A white circular border encloses the seal with the words Availability, Integrity, and Confidentiality.

2024-2025 Security Awareness Seminars

Scholars, Partners, and Family members are invited to join us for a seminar on how to protect yourself online. We will review everything from passphrases to spotting scams. The best way to protect yourself and your family is awareness, and this is...

IAS warning on email scams and other phishing activity - August 2023

Dear Faculty, Members, Visitors, and Staff,

As we start the countdown to our Fall term here at the Institute for Advanced Study, we are reminded of the risks of scams and phishing as they arrive on campus. Recently, a large volume of phishing...

Post-Quantum Cryptography and its Impact on Higher Education

Brian Epstein Post-Quantum Cryptography and...

IAS warning on email scams and other phishing activity

Dear Faculty, Members, Visitors, and Staff,

As we start the Winter-Spring term here at the Institute for Advanced Study, we are reminded of the risks of scams and phishing as they arrive on campus. This morning, an email with the subject "Urgent...

What am I doing about the LastPass breach?

Background

Remembering all your passwords is difficult. We've been recommending since 2013 that folks use a password manager to securely create and store your passwords so that you don't have to remember them. The natural fear has always been...

SIM Jacking - or how the thieves can steal your phone number

There is a nefarious practice of stealing people's phone numbers to intercept their phone calls and text messages, and it is fairly easy to do if you know what you are doing. The attack involves calling the wireless carrier and convincing them to...

Update to Duo Login

An upcoming change will modify the look of our Duo Multi-Factor Authentication login prompt. This change will enhance the security of the system, and will be rolled out to our web applications over the next few months. Although there is no major...

Warning about text messages impersonating the New Jersey Motor Vehicle Commission (NJMVC)

The New Jersey Cybersecurity & Communications Integration Cell (NJCCIC) sent out a notice reporting several incidents regarding fake text messages impersonating the New Jersey Motor Vehicle Commission. This scam is being used to collect your private...

What I'm doing about Contact Tracing apps during the global pandemic

The short answer is, I'm using the COVID Alert NJ [1] [2] app on my smartphone. I find it to be a safe, secure, and private way for me to participate in helping to stop the spread of COVID-19. That being said, I didn't trust the app blindly. I did...

Upcoming changes to support Duo Multi-Factor Authentication in web based login screens for IAS

In the upcoming months IAS will be making a change to the login process for our web based applications by adding support for Duo Multi-Factor Authentication (MFA). This is the same technology that we currently use for our remote access system...