Personal and Corporate Software Inspector

Secunia Personal Software Inspector (PSI), available for Windows operating systems, helps you identify the software installed on your computer and keep it up to date. Secunia PSI scans your computer for thousands of known programs, checks for missing security patches and vulnerabilities in those programs, and reports back to you with information on how to update them.

Download the Personal Software Inspector

 


 

IU LSPs who deploy CSI agents to systems should provide notification to the users describing who will use the tool, how, and for what purpose, as well as anticipated use of the resulting information.

For more information about the PSI and CSI products, see:

Frequently Asked Questions

Below are several frequently asked questions about the implementation and use of CSI, including email notices that are sent.



Why do I need to keep my software updated?

Software and operating systems aren't coded perfectly, and attackers are always searching for vulnerabilitiies. Vendors continually work to patch these vulnerabilities — and when they do, the patches are released in the form of updates. You risk leaving your computer and personal information vulnerable by neglecting to timely update and patch your software.

top


What are the risks of having vulnerable software installed?

After software is released, vulnerabilities are frequently found that allow attackers to exploit the program and gain access to your computer and files. Therefore vendors frequently distribute fixes to update the programs and remove the vulnerabilities. When you don't keep it up to date, attackers are able to target you and use the vulnerability to get to your data. So keep your software applications up-to-date by removing or patching vulnerable ones.

top


How did CSI get installed on my computer?

The Indiana University versions of PSI and CSI may have been installed on your Windows computer in one of three ways:

  • Via Get Connected (if you live in the residence halls)
  • Via IUware (if you installed the Secunia PSI from IUware)
  • By your department's local support provider (LSP)

top


How does IU know that I have peer-to-peer software installed?

The CSI agent that is installed on your computer sends information about the software programs on your computer to the CSI server run by the UIPO.

top


What information is CSI collecting?

The CSI agent collects a list of software applications installed, along with their version numbers, and locations on the computer. It does not collect the content of any files. See a detailed response in the "Privacy notice" section of http://kb.iu.edu/data/azfj.html

top


How is the information about my computer protected?

All data sent from your CSI agent to the CSI server at IU is communicated via an encrypted connection (SSL).

top


If I receive a notice from the UIPO generated by Secunia CSI, does that constitute a disciplinary action and will it affect my academic standing or employment status?

The notice isn't discipline of itself, but creating risks to institutional data or engaging in unlawful file sharing may lead to discipline and personal liability.

top


How can I remove peer-to-peer file sharing software?

top


How can I remove the Secunia CSI agent?

See http://kb.iu.edu/data/azfk.html

top

Security & Policy Blog Posts

  • Tens of thousands of Twitter accounts have been compromised in a recent hack attack in which more than 55,000 passwords were leaked and posted to Pastebin by anonymous hackers. You should probably change your Twitter password today.
  • A mistake by Apple can cause Mac OS X 10.7.3 (Lion) to store your login password on the hard drive in clear text.
  • Adobe Flash Player Security Update
  • A memo has been sent to the President's Cabinet to help raise awareness of the Information Security and Privacy Program.

    Recent Security Bulletins

  • A remote code execution vulnerability exists such that an attacker who successfully exploited this vulnerability could run abitrary code on the target system, then install programs; view, change, or delete data; or create new accounts with full rights.
  • "Flashback" is Mac-specific malware that is currently spreading via a recently patched Java vulnerability
  • A remote code execution vulnerability exists such that an attacker who successfully exploited this vulnerability could run abitrary code on the target system, then install programs; view, change, or delete data; or create new accounts with full rights.
  • Warning about phone calls requesting information or requesting users to take action to compromise computers.
    • Read the PSIA Blog
    • IU Notify
    • Crime Prevention Tips from IUPD
    • Request Assistance from Environmental Health and Safety
    • Secure Your Computer