This project is carried out by direct negotiation with Oracle Malaysia – thus saving cost for UM. It also facilitates administration by reducing the administration work to once a year as opposed to seperate renewal for each Oracle licenses.
The antivirus implementation helps protect files stored in the Network Attach storage appliance at the upload stage.
As Staff Portal become more critical as the nerve centre for UM staff online activities it has become a top priority to ensure that it is supported by a robust infrastructure. Existing database server is upgrade. Application servers are both supported by physical and virtual servers to achieve high scaleability.
As UM has gone online to handle its procurement process, it is important the the process is supported by robust infrastructure. Existing database server is upgrade. Application servers are both supported by physical and virtual servers to achieve high scaleability.
Used by Pusat Sitasi Negara lead by Professor Zainab Awang Ngah from FSKTM UM was given the honour to lead Pusat Sitasi Negara by the appointment of Professor Zainab Awang Ngah as the director. Robust servers infrastructure is an important element in MyCite system, as the system is accessed globally.
Assist Customer Service Department (BPP@ CSD) to prepare a server infrastructure that work together with Microsoft Active Directory to establish an integrated Desktop Management Facility.
Assist Application Divisions (BSMP, BITMAP, BPE) to migrate to Oracle 11g enviroment as support for Oracle for 9i is going to end next year.
Work to upgrade the database server to Oracle 11g is also on its way.
BPPD is also setting up a development database server to facilitate restore and testing process for application division (BSMP, BITMAP, BPE)
ICT-Security, Audit and Training Division was established in July 2011 by the merger of two formal divisions: Bahagian Perancangan dan Latihan (BPL), and Bahagian Keselamatan & Pengkomputeran Akademik. The purpose of the merger and departmental restructuring then was to ensure that activities to be implemented could be more focused, and to enable PTM in particular and University of Malaya in general to upgrade its ICT related value-added service activities in the future.
This section is primarily responsible for the following activities: Implement internal monitoring, auditing, and awareness activities related to campus ICT security Coordinate ICT Policy Documents, ICT Security Policies as well as creating a standard auditing system for web application system development activities in PTM Coordinate the implementation of ISMS - MS ISO / IEC 27001:2007 Information Security Management System
UMCERT was formed by the ICT Council Meeting No. 1/2011 on May 3, 2011 and was officially registered with the MyCERT agency on October 11, 2011.
The purpose of MyCERT team is to streamline the management of ICT security incident handling at the University of Malaya and to comply with government recommendations in the General Circular No. 4 Year 2006: Pengurusan Pengendalian Insiden Keselamatan Teknologi Maklumat dan Komunikasi (ICT) Sektor Awam. UMCERT members comprised of technical staff representatives from all the divisions of PTM.
Security Audits on the applications, servers and network hardware have been conducted regularly and continuously since 2007. Through the means of ICT audits-aka security posture assessments, where the application, server and network hardware weaknesses were determined by combinations of scanning tools, manual testing and site auditing. Corrective and remedial action plans based on the brief findings-reports, tests and analyses were submitted regularly to the relevant parties of the PTM for remediation. Follow-up audits were conducted to ensure that weaknesses had been closed.
Statistics of security audits conducted in the year 2011:
|
The statistics shown that many application security audits were done in the year 2012. This was due to the prevalent cyber-attacks targeting and exploiting weaknesses in web-based applications. All high-risk findings were recorded and remedial actions were applied; non-responses were closely monitored.
PTM cooperates with government agencies and service provider to solve ICT security breaches involving external domains; it acts as intermediary and communication agent for University of Malaya, Malaysian Computer Emergency Response Team (MyCERT), Jaring and Government Computer Emergency Response Team (GCERT), in the processes to resolve security incidents involving IPs from inside and outside the UM’s domains.
Statistics of cases received and solved in the year 2011:
|
Based on the statistics, the number of cases received showed an increase compared to the year 2010, especially in spamming cases.
Centralised anti-virus monitoring has been carried out consistently and continuously since January 2007. Using centralised AV monitoring, valuable data such as number of computers received AV updates, number of computers infected with viruses and the effectiveness of antivirus policies in cleaning the virus infections, were recorded each day. Relevant ICT representatives were informed of recurrent computer virus infections by emails; either manual scan cleaning or formatting was the normal procedure taken to disinfect the affected computers.
|
According to the statistics, number of computers cleaned of virus infections is increasing when compared to the statistics of the year 2010. The increase was due to the continuous and increasing strenuous efforts to detect problematic computers that had clogged up network traffics in various segments, using multitude of tools. Continuous virus cleaning is very important in reducing the risks of data loss and downtime, and also in reducing the wastage of computer resources and network bandwidths by virus and malware traffics.
PTM has carried out P2P software eradication operations since the beginning of April 2010. Eradication operations were launched because, based on the security analysis, copyright infringements involving Peer to Peer (P2P) software were becoming an increasing security menace.
Statistics of P2P software investigated during the year 2011
|
Based on these statistics, it appears there are still many users who choose to continue using P2P software even though its use is prohibited since 2004. A more holistic approach should be done to curb this problem.
|
The Primary responsibilities of this section are as follows: Provide basic support services to the High Performance Computer (HPC) users. Conduct, manage or organise seminars, courses and ICT-related trainings for the campus community and PTM technical staff. Manage & regulate licensed software installation, distribution or deployment for the purposes of teaching & learning.
|
|
In support of UM’s aspirations towards becoming a world-class research university, PTM, in collaboration with the UM researchers, has been providing high-performance computing services to our researches at our high-performance computing facility located at HPC & Cluster Server Room, PTM; currently, PTM provides basic support services such as managing system operations and monitoring hardware usage for the HPC users. Web pages of the UM HPC (http://ptm.um.edu.my/?modul=UMHPC) were published in PTM’s portal, in August 2011, to inform the HPC users on the services provided by the center. There was an increased utilisation of HPC facilities - currently housed in Data Center, PTM - in the year 2011.
|
|
Microsoft Hedstart program was introduced by PTM in collaboration with Prestariang and Microsoft; the purpose was to eliminate the use of unlicensed Office software among the university community.
In short, Hedstart program was launched on 1st December, 2011, to provide access for students to download Microsoft Office 2010, and additional 200 other Microsoft software for the learning, testing and research purposes by the students of the University of Malaya. It provided two download sites where staff and students could download licensed Office software and other licensed Microsoft software:
Through this Site, students and staff are able to download more than 200 types of Microsoft software including the following: Visual Studio, Windows Server, NET Enterprise Servers (various Windows servers including Compute Cluster Server, Commerce Server, BizTalk Server, Host Integration Server, SQL Server, Exchange Server, and SharePoint Portal Server), MSDN Library, Windows 7, Windows Vista Business Edition, Windows XP Professional and Windows XP Home Edition, Visio, Microsoft Project, and the Expression Studio suite. The downloaded software has expiry date of 2 years from the date of download.
Students paid a special price to download Office software. Downloaded Office software has perpetual license.
|
|
|
This Active Directory deployment project entered its first phase which was to join staff computers in the non-academic responsibility centres to the domain. The responsibility centres involved were Bursary Department, Registrar Department, Library, Residential Colleges, Institute of Graduate Studies, Vice Chancellor, Deputy Vice Chancellor (Academic & International), Deputy Vice Chancellor (Research & Innovation), Deputy Vice Chancellor (Students Affairs & Alumni) and Deputy Vice Chancellor (Development). For the year 2011, 800 computers were joined to the Active Directory domain.
In 2011, 1000 computers were procured and distributed to newly appointed staff, for replacement of staff’s old computers which were more than 6 years old and for replacement of old computers in the computer laboratories.
The brand and computer model was IBM LENOVO M81.
The staff’s new campus card is a 4 kilobytes smart card replacing the old 1 kilobyte smart card, and it has the following features:
(i) Access control at doors and gate barrier
(ii) Capability to store up to 4 kilobytes of data in the card
(iii) Capability of making payments using ‘Touch and Go’
(iv) New design printed on card
The exercise to replace staff’s campus card started in November 2010 and was completed in March 2011.
PTM’s quality objectives in solving ICT complaints are as follows:
(i) 80% of complaints in the Helpdesk System solved by PTM are solved within 4 working days.
(ii) 90% of complaints in the Helpdesk System solved by PTM are rated at least 3 out of a scale of 5.
In 2011, both quality objectives were met with the following details:
(i) 86.8% of complaints in the Helpdesk System solved by PTM were solved within 4 working days.
(ii) 95.7% of complaints in the Helpdesk System solved by PTM were rated at least 3 out of a scale of 5.
Statistics of ICT complaints for year 2011 is given below :
CENTER FOR INFORMATION TECHNOLOGY
REPORTS ON CUSTOMER SATISFACTION AND COMPLIANCE STATISTICS
FOR ICT PROBLEM COMPLETED WITHIN 4 DAYS
ON YEAR 2011
|
|
|
|
The development activities by the division concentrate more on Enterprise Applications which basically aims to: integrate/develop various relevant available OSS technologies & platform with existing portal/systems towards a manageable enterprise wide system for the university.
|
The development activities by the division concentrate more on Enterprise Applications which basically aims to: integrate/develop various relevant available OSS technologies & platform with existing portal/systems towards a manageable enterprise wide system for the university.
|