Policies for Student Use of Shared Information Technology Resources

These policies are also printed in Policies for Student Use of Shared Information Technology Resources, also published by Hopkins ITS. http://www.jhu.edu/~hcic/guidebook/studguide4.html

The Johns Hopkins University is committed to providing a robust information technology environment to support its students and faculty in the pursuit of their research and instructional objectives. Overall, undergraduate and graduate students are afforded the same access to computing and networking resources as are faculty and staff.

Hopkins Information Technology Services (Hopkins ITS) makes available both computing and networked information resources which may be used by university undergraduates, graduate students, faculty, and staff. Understanding that for the university to maintain an environment of open access to networked computing resources is important, those who use these facilities must comply with the written policies covering their use as well as the "spirit and intent" of those policies. These resources are intended to be used for instruction, independent study, authorized research, and the official work of the offices, departments, recognized student organizations, and agencies of the university. Students who are given access to university computer facilities and campus­wide communication networks assume responsibility for their appropriate use.

The university expects students to be careful, honest, responsible, and civil in the use of computers and networks. Those who use wide­area networks (such as the Internet) to communicate with others or to connect to computers at other institutions are expected to abide by the rules of those technology systems and networks as well as those for JHU’s shared information technology systems and resources. Any activity that intentionally obstructs or hinders the authorized use of University computing and network resources is prohibited.

Please note, there is distinct misconduct that not only violates university policy but also is considered crimes by State and Federal law and is, therefore, subject to criminal penalties. Such misconduct includes, intrusions of the public switched networks; (the telephone company), major computer network intrusions; network integrity violations; privacy violations; industrial espionage; pirated computer software; knowingly gaining unauthorized access to a computer system or data base; falsely obtaining electronic services or data without payment of required charges; destroying of electronically processed, stored, or in­transit data; and other crimes where computers are used to aid the commission of a criminal offense.

Students are expected to abide by these rules and policies and to consult an official of Hopkins Information Technology Services prior to any activity that would appear to threaten the security or performance of University computers and networks. Failure to do so may result in disciplinary action.

Use of Facilities

Computer and network facilities are provided primarily for their educational use. These facilities have tangible value. Consequently, attempts to circumvent accounting systems or to use the computer accounts of others will be treated as forms of attempted theft.

Students may not attempt to damage or to degrade the performance of JHU’s computers and networks and should not disrupt the work of other users.

Students may not attempt to circumvent security systems or to exploit or probe for security holes in any JHU network or system, nor may students attempt any such activity against other systems accessed through JHU’s facilities.

Execution or compilation of programs designed to breach system security is prohibited unless authorized in advanced.

Students assume personal responsibility for the use of their user accounts and may not disclose their passwords or otherwise make JHU’s facilities available to unauthorized persons (including family or friends). Moreover, the possession or collection of others passwords, personal identification numbers, or other secure identification information is prohibited.

Use of JHU’s computers and networks for business­related purposes without authorization is prohibited. Students should not attempt to exploit, test, or probe for suspected security holes on JHU’s computers or networks, but instead should report them to Hopkins ITS. Likewise, users should not disseminate to others any information that serves to circumvent or degrade system or network security or integrity.

Physical theft, rearrangement, or damage to any university computer or network equipment, facilities, or property is strictly prohibited, and will be reported to the university police. This includes all public computer labs, network hubs, wiring, and links.

Students may not plug in personal computers or peripheral devices in public computer labs or connect to the JHU Network without prior authorization.

Hopkins ITS must ensure that academic work takes precedence at all times over other computing activities in its facilities. In situations of high user demand that may strain available computer resources, Hopkins ITS reserves the right to restrict (e.g., to specific times of day) or prohibit computer entertainment activities such as game playing. Similarly, loud or disruptive behavior which may hinder academic work in the computer labs is not permitted at any time.

Privacy of Information

Student privacy on JHU computer systems and networks means that each account, and the contents of files associated with that account, belong to the designated user(s); they must not be used or intruded upon by anyone else without the explicit permission of the designated owner. However, pursuant to the Electronic Communications Privacy Act of 1989, Title 18, United States Code, Sections 2510 and following, notice is hereby given that there are no facilities provided by The Johns Hopkins University that guarantee the confidentiality of files. Acceptance of a university account implies specific consent to the university to review, audit, intercept, access and disclose all messages created, received, or sent over its computers and/or e-mail systems for any purpose. Notice is hereby given that the university intents to exercise these rights. A user of the university's computer systems has no right of privacy in e-mail messages or other communications that are created, sent, received or stored on these systems. Users of the university's computer systems and networks are advised that they should not assume the confidentiality of any message. Further, a personal password does not guarantee the confidentiality of e-mail messages. Even when a message is deleted or erased, it is still possible to retrieve and read the message. However, it is not the routine policy of the university administrator's or designees to view others' files, and the intention is to keep files private, even though such privacy cannot be guaranteed. Therefore, any attempt to circumvent or to gain unauthorized access to private information (including both stored computer files and messages transmitted over a network) will be treated as a violation of privacy and will be cause for disciplinary action.

In general, information that a student would reasonably regard as private must be treated as private by other users. Examples include the contents of electronic mail boxes, the private file storage areas of individual users, and information stored in other areas that are not public. That measures have not been taken to protect such information does not make it permissible for others to inspect it.

On shared and networked computer systems certain information about users and their activities is visible to others. Users are cautioned that certain accounting and directory information (for example, user names and electronic mail addresses), certain records of file names and executed commands, and information stored in public areas, are not private. Nonetheless, such unsecured information about other users must not be manipulated in ways that they might reasonably find intrusive; for example, eavesdropping by computer and systematic monitoring of the behavior of others are likely to be considered invasions of privacy that would be cause for disciplinary action. The compilation or redistribution of information from university directories (printed or electronic) to third parties, especially those outside the university, is forbidden.

Intellectual Property

Copyright exists in any original work which exists or is fixed in any tangible medium of expression. Images displayable on computer screens, computer software, music, books, magazines, scientific and other journals, photographs, and articles are some examples of property subject to copyright. A copyright notice is not required. It is a violation of copyright law to copy, distribute, display, exhibit, or perform copyrighted works without permission of the owner of the copyright.

For your use, the University provides many programs and data which have been obtained under contracts or licenses stating that they may not be copied, cross-assembled, or reverse-compiled. You are responsible for determining whether or not programs or data are restricted in this manner before copying, cross-assembling, or reverse-compiling them in whole or in any part. If it is unclear whether you have permission to do so, assume that you do not. Hopkins Information Technology Services will assist with any questions regarding software usage and licensing issues.

The Recording Industry Association of America (RIAA) has bought to the University's attention numerous cases of JHU students putting literally hundreds of copyrighted songs on sites residing on servers that are connected to the university network. We agree with RIAA's Anti-Piracy Counsel that putting such songs on sites and downloading them amount to serious violations of United States and foreign copyright law. Persons who put copyrighted music on sites and those who download it expose themselves to civil, and possibly criminal, consequences. Should RIAA or individual copyright owners take action against students who are alleged copyright infringers, the University will not provide such person a legal defense or an indemnity against the award of damages. Such damages can amount to $100,000 per act of infringement.

Use of the JHU Network

Users with personal computers on the JHU Network are expected to take reasonable precautions to ensure the security of their systems. Students may be held responsible for misuse by others that occurs on their systems.

Users should not attempt to plug their personal computers into any data jack for which they are not personally registered or authorized to use.

Attempts to plug into an unauthorized data jack will result in its automatic deactivation. Attempts to monitor, analyze, or tamper with network data packets that are not explicitly addressed to your computer are prohibited.

Using a network address other than the one assigned by Hopkins ITS is prohibited.

Users are not permitted to register external domain names (i.e., any domain outside of JHU.edu) that reference systems on the JHU Network.

Users may not advertise routing information on the JHU Network or act as gateways to external or private networks.

It is prohibited to connect any secondary physical network to the JHU Network without authorization.

Providing services or running applications which consume excessive bandwidth on the JHU Network without authorization is prohibited.

Electronic Communication

JHU neither sanctions nor censors individual expressions of opinion on its systems. However, obscene or harassing electronic communication is prohibited, as are computer messages that target others in a threatening manner.

Those who make use of on-line forums and other network communication utilities (e.g., Newsgroups and the Web) do so voluntarily, with the understanding that they may encounter material they deem offensive. Students who subscribe, post messages, or simply browse through such utilities must abide by the rules governing each in addition to JHU’s rules governing computing on campus.

Although commercial work is prohibited on JHU systems and networks, some on-line forums allow the posting of job opportunities and personal items for sale. Such activity is permissible within the constraints of policies specific to each forum. Hopkins ITS takes no responsibility for any fraud or misrepresentation users may encounter.

Harassment

Any unwanted, repeated communication may constitute harassment. Any communication with the direct intention of harassing, threatening, implying or otherwise causing harm to people, or classes of people is a violation of university policy. If you should receive any harassing messages electronically, you may consider notifying the sender. Many times the sender may not realize that their communication is unwanted or offensive until you tell them. However, if the sender continues after being notified, and you do not wish to contact the sender, or if the situation becomes serious, you should contact Hopkins Information Technology Services at 410.516.HELP or integrity@jhu.edu . If the situation requires immediate attention, call university security at 410.516.6400. Be sure to save copies of all harassing material.

Interfering With a User's Authorized Services

Any activity which causes disruption in service to other users is considered interference. In some cases, using more resources than you are entitled to can also be considered interference (e.g., using excessive storage space on the shared systems, flooding chat channels or newsgroups). More important, you must not monopolize computing resources for leisure activities such as game playing and other trivial applications either locally or over an affiliated network. You should refrain from using unwarranted or excessive amounts of storage; printing documents or files numerous times because you have not checked thoroughly for all errors and corrections; or run grossly inefficient programs when efficient alternatives are known to be available. You should be sensitive to special needs for software and services available in only one location, and cede place to those whose work requires the special items.

Sharing Resource Accounts and Passwords

Your network login and password are for your personal use only. If you share your login and password with your spouse, family members, friends or roommates, then you are giving them access to services they are not authorized to use. They may send e-mail, post messages, or even chat with people while posing as you without your knowledge. Do not share your account or password with anyone. If you suspect that someone may have obtained your password, change it immediately. If you suspect that someone has illegally accessed your login and password, notify Hopkins Information Technology Services at 410.516.HELP immediately or send e-mail to integrity@jhu.edu. Conversely, using someone else's password to access services or data is also a violation of university policy, regardless of how the password was obtained. DO NOT use anyone else's password, account, or e-mail.

Disruption of System Security or Integrity

Tampering with the operation of any server or network resource is prohibited. Any such activity constitutes a threat to the normal operation of that resource and can potentially affect thousands of users. Any such attempt will be regarded as malicious in intent and will be dealt with as such.

Tapping phone or network lines: Running a network "sniffer" program to examine or collect data from the network is considered tapping a network and is forbidden.

Unauthorized access: Legitimate use of the University's computer systems does not extend to what one is capable of doing on that system. In some cases, there may be security loopholes through which access can be gained to a system or to data on that system or network. This is unauthorized access. If a student accidentally permits access to his or her files through the network, you do not have the right to access those files unless you have been given explicit authorization to access the material. This is similar to accidentally leaving your dorm room unlocked. You wouldn't expect your neighbor to use that as an excuse for entering your room.

Consequences of Misuse

Infractions of this shared use policy may result in loss of use of facilities, system and network privileges. Pending the outcome of an inquiry, when Hopkins ITS has reason to believe a user has violated the shared system policy, it may suspend the user's account, terminate processes or connections that threaten systems or network security, performance, or integrity.

If, in addition to withdrawing privileges, Hopkins ITS believes the violation warrants additional disciplinary action, the infraction may be referred to the Dean of Students, Undergraduate Academic Ethics Board, or Associate Dean responsible for graduate students in the school in which the accused student is enrolled for disciplinary procedures administered by them.

Certain violations may constitute criminal activity that may be referred to local or federal law enforcement authorities. In particular, Federal statutes 18 USCS 2511 (Electronic Communications Privacy Act), 18 USCS 1030 (Computer Crime Act) and Maryland State statute Article 27, Section 146, deal with the use of information technology and networking. Members of the university community are expected to respect any applicable local, state, or federal laws. Should further action be applicable, as in cases that violate local, state, or federal laws, the appropriate authorities will be notified.

Students will be held to the same standard of conduct (in oral, written, and electronic communication) with the staff of Hopkins ITS as with other officers and staff of the University.

Conclusion

The Johns Hopkins University and Hopkins Information Technology Services recognize that our clients are extremely diverse in their needs and requirements. Providing this large range of services for research and instruction necessarily entails providing a relatively unrestricted and flexible systems' and network's organization. To this end, we depend on and request that our users practice considerate and responsible computing and adhere to common sense standards. As noted in the Student Academic Manual.

So that all users can benefit from the shared systems as they are intended to be used, you are expected to follow these rules and help others follow them as well. If you know someone who is willfully performing any of the inappropriate activities listed above and/or need assistance dealing with them, send an e-mail to Hopkins Information Technology Services at integrity@jhu.edu or abuse@jhu.edu.

Students are expected to refrain from conduct that injures persons or property. The University expects all students to conduct themselves as law-abiding citizens, to respect the rights of others, and to refrain from behavior which may impair the university's purpose or its reputation within the community. When problems arise, they will be dealt with to insure the unimpaired operation of our systems and network.

The facilities, shared systems and networks are an extremely important and ever-changing resources for the JHU community. The University reserves the right to define what are unauthorized student uses. As a member you are responsible for staying informed about the policies and procedures updates. This document is published on the JHUNIVERSE at [www.jhu.edu/HITS/student_policy].

The dramatic increase in the use of computers and shared networks during the past few years has correspondingly increased the potential for abuse of the system. As a matter of policy and sound security practices, Hopkins Information Technology Services routinely logs the use of its shared computing systems and monitors the traffic and performance of the University network.

Waiver

Users recognize that systems and networks are imperfect. Hopkins ITS cannot compensate users for degradation or loss of personal data, software, or hardware as a result of their use of university­owned systems or networks, or as a result of assistance they may seek from Hopkins ITS staff.