online copyright education
DESCRIPTION
Under the Higher Education Opportunity Act (HEOA), universities are required by July 1, 2010 to compile a written plan on how they will educate students on the dangers of file sharing and which procedures are in place to effectively combat illegal file sharing. In preparation for the HEOA implementation and to more effectively educate the UNC community about the issues of copyright law and file sharing, the Information Security Office designed an online course combined with a follow-up survey. Come learn about UNC’s new online copyright education course.TRANSCRIPT
its.unc.edu 1
DMCA notices 2007 - 2010
DMCA notices 2007 - 2010
Jan Feb Mar Apr May jun Jul Aug Sep Oct Nov Dec0
50
100
150
200
250
2007200820092010
its.unc.edu 2
Copyright at UNC-Chapel Hill
Copyright at UNC-Chapel Hill
Vast majority of copyright infringement notices target students living on campus• Some faculty and staff as well
Staff, for ISO procedural purposes, includes graduate students
Large scale Security awareness campaigns Fall 2008 through 2010 about file-sharing at UNC-Chapel Hill• Primarily targeting students, but the file-sharing campaign
website has general resources applicable to faculty and staff Significant decrease in copyright notices from Fall 2007 to Fall
2008 Students, faculty and staff still come in with a misunderstanding
about file-sharing• Downloading versus uploading• Music versus movies• Pay for enhanced file-sharing experience• Wireless routers• Off campus versus on campus
its.unc.edu 3
Copyright at UNC-Chapel Hill
Copyright at UNC-Chapel Hill
• Procedure for responding to copyright infringement notices Identify user / registered owner of the device involved in the
infringement Disable network access for the computer involved in the
infringement and notify user/registered owner of the notice received
Several requirements must be met to have network access restored
o Meet with ITS Administrative staffo Remove infringing content from computero Complete the Acceptable Use Policy quiz
Access will be restored once the requirements have been met For faculty / staff (may include graduate students) – the
supervisor / department head will be notified Repeat offenses:
o Faculty and staff will be referred to Human Resources for disciplinary hearing
o Students are referred to the Dean of Students who will determine possible sanctions
its.unc.edu 4
Copyright at UNC-Chapel Hill
Copyright at UNC-Chapel Hill
Dangers of file-sharing:• Malware/Virus infections
About 25% of all people with copyright infringement notices have a history of malware infection on their computers, often requiring reimaging of the device
• Spyware such as keyloggers Catch passwords to gain access to systems and UNC
network through compromised machines• Identity theft
Seattle man accused of targeting parents in online ID theft In court documents, investigators allege that Wood specifically targeted
parents whose children downloaded file-sharing software and inadvertently opened their computers to anyone on the Internet. (http://www.seattlepi.com/local/404885_filesharing06.html)
Citigroup Customer Data Leaked on LimeWire Citigroup has confirmed that it is investigating a data breach involving
the names, Social Security numbers and credit information of 5,208 customers leaked by an employee of its ABN Amro Mortgage Group unit onto the LimeWire peer-to-peer file-sharing network. (http://www.eweek.com/c/a/Security/Citigroup-Customer-Data-Leaked-on-LimeWire)
its.unc.edu 5
1.Goals
2.Set up of course
3.Topics of questions
4.Quiz
5.Survey
6.Comparison with other universities
Blackboard Acceptable Use Policy
Training
Blackboard Acceptable Use Policy
Training
its.unc.edu 6
Goals Goals
1.Reduce time (and money) involved in handling
DMCA notices
2.Reduce repeat offenses due to lack of technical
knowledge of file sharing process and software
3.Make students aware of current topics in
copyright / AUP
4. If possible, save money by focusing on best
outreach methods
its.unc.edu 7
Set up of courseSet up of course
1. Use of blackboard since most students are familiar with this LMS
2. Make use of currently existing file sharing and copyright–related websites in UNC domain• Minimizes need to contact third parties to clarify copyright• Facilitates updating of documents• Allows for UNC-specific information to be presented
3. Course consists of websites with copyright and Acceptable Use Policy-related material, a multiple choice quiz and a voluntary follow-up survey
4. Students, faculty and staff are enrolled whenever they are linked to a DMCA copyright notice and un-enrolled once quiz, not survey, is completed with requisite number of points.
its.unc.edu 8
Topics of questionsTopics of questions
1. Questions are drawn from broad areas of copyright and Acceptable Use Policy prohibitions
2. Question pool is updated as incidents occur related to these areas
3. Question pool includes issues often misunderstood by students• Based on feedback provided by students in meetings• Based on common troubleshooting involved with DMCA
notices
4. Questions are updated as copyright law changes, such as the Higher Education Opportunity Act (effective summer 2010)
5. Questions are updated based on mailing list discussion, such as EDUCAUSE policy forum.
6. One complaint about course (out of minimum of 180 people taking the course)
its.unc.edu 9
Topics of questionsTopics of questions
Sample topics
1. Posting final presentations of other students online
2. Non-password protected routers and downloading in the dorms
3. The elements of fair use under the DMCA
4. Policy regarding passwords and sharing
5. Responsibility of registered owner of device regarding use of device
6. Uploading versus downloading in file-sharing
7. Off-campus versus on-campus downloading during the summer
8. Legality of file sharing software
9. Malware and file sharing software
10. Laws regarding copyright in USA versus other countries
11.Criminal versus civil penalties for copyright violations
its.unc.edu 10
QuizQuiz
1. Current question pool of 60 + questions
2. 15 question per quiz randomly selected from pool
3. Passing requires 12 out of 15 questions answered correctly
4. Can take the quiz repeatedly, but questions will change
5. Incorrect answer will not reveal correct response We have learned about student information
sharing
6. Students are supposed to email [email protected] upon quiz completion
its.unc.edu 11
SurveySurvey
1. First attempt at online training by Information
Security, so an anonymous survey was used to
collect feedback
2. Surveymonkey tool
3. Onyen collected, but excluded from reports
4. IRB approval was obtained before roll out
5. Open to faculty/staff and students
6. No requirement to answer all questions
7. No requirement to take survey
its.unc.edu 12
SurveySurvey
1. Topics of survey
• File sharing campaign components
• Learning points from copyright course
2. High completion rate (134 out of 181 completed
survey)
• If longest question is excluded, completion rate
170 out of 181)
3. No complaints about survey (length or content)
its.unc.edu 13
1.RIAA “notice onslaught” of 9/30/10• Starting around 6AM, RIAA started sending
out large volumes of notices to universities• Copyright listserv buzzing with why now
and why so many (old) notices?2.Comparison by numbers• UNC received 21 notices• Three other public universities reported
around 100 notices• UNC was definitely at the low end of the
number of notices received3.RIAA explanation• A bottleneck on their mail server
Comparison with other universitiesComparison with
other universities
its.unc.edu 14
1.RIAA “notice onslaught” of 9/30/10• Starting around 6AM, RIAA started sending
out large volumes of notices to universities• Copyright listserv buzzing with why now
and why so many (old) notices?2.Comparison by numbers• UNC received 21 notices• Three other public universities reported
around 100 notices• UNC was definitely at the low end of the
number of notices received3.RIAA explanation• A bottleneck on their mail server
Comparison with other universitiesComparison with
other universities
its.unc.edu 15
Survey questionsSurvey questions
Yes No0
20
40
60
80
100
120
140
160
Did you read through the file shar-ing information found at “File Shar-ing on the UNC-Chapel Hill Net-work” (http://www.unc.edu/fileshar-ing) when completing the copyright quiz?Have you talked with any other students about the information since taking the quiz?Did you know that these websites were created for a security awareness campaign ?
its.unc.edu 16
Survey questionsSurvey questions
Lette
r to
pare
nts
Poster
s in
dorm
s
Doorh
ange
rs in
dor
ms
Ads in
DTH
Scre
ensa
vers
Web
site
Power
point R
esNet
020406080
100120
Have you seen the following items on campus or in the newspaper during the
Fall semester?
Letter to parents discontinued after 2009
its.unc.edu 17
Survey questionsSurvey questions
Yes No0
20
40
60
80
100
120
140
160
Did you know that sharing as well as downloading of files can result in in-fringement notices?Did you know this be-fore taking the quiz in Blackboard?
its.unc.edu 18
Future developmentsFuture developments
What makes UNC different?• Each faculty, staff or student must meet with ITS staff in
person and sign form acknowledging AUP compliance• The quiz is significantly longer (possibly harder) than at
other universities Columbia University, for example, has five fixed
questions Many universities automate all processing, no
meeting requirement Future plans
• Automate some of the processing, but maintain face –face meeting requirement
• Make the course available to departments as an additional learning tool for affiliates