Difference between revisions of "DyKnow"
imported>Cov (Created page with "'''DyKnow Vision''' is proprietary classroom software made by Dynamic Knowledge Transfer, LLC and used by the College of Engineering at Virginia Tech...") |
imported>Matthazinski |
||
| (One intermediate revision by one other user not shown) | |||
| Line 2: | Line 2: | ||
=Malware Features= | =Malware Features= | ||
| − | The Monitor module was enabled in fall of 2007 but by fall of 2010 its cost and non-compliance with the [ | + | The Monitor module was enabled in fall of 2007 but by fall of 2010 its cost and non-compliance with the [http://www.vt.edu/about/acceptable-use.html Acceptable Use Policy] had been noticed by the COE Director of Information Technology and the module was removed. |
=Security= | =Security= | ||
| Line 17: | Line 17: | ||
* [[Online Course Systems]] [http://www.edtech.vt.edu/ocs/dyknow/index.shtml DyKnow support page] | * [[Online Course Systems]] [http://www.edtech.vt.edu/ocs/dyknow/index.shtml DyKnow support page] | ||
| − | [[Category: | + | [[Category:Campus computing resources]] |
Latest revision as of 21:56, 12 October 2012
DyKnow Vision is proprietary classroom software made by Dynamic Knowledge Transfer, LLC and used by the College of Engineering at Virginia Tech. DyKnow Monitor, an optional module, includes malware-style features such as application and URL blocking, remote opening and closing of programs and screen captures of students' computers.
Malware Features
The Monitor module was enabled in fall of 2007 but by fall of 2010 its cost and non-compliance with the Acceptable Use Policy had been noticed by the COE Director of Information Technology and the module was removed.
Security
In the spring of 2009, the IT Security Office and Dynamic Knowledge Transfer were alerted that the login process was unsafe. Passwords are sent by DyKnow over the wire as an MD5 hash with a static salt and symmetrically encrypted with AES. While the salted MD5 hash is invulnerable to standard precomputation attacks, the symmetric encryption was performed with key information shared between all clients, allowing for simple decryption if the traffic can be intercepted. Within a month of notification, the issue was worked around at Virginia Tech. Users were instructed to enable SSL for transactions and unencrypted access to the server was shut off. No response from DyKnow on this issue is known of.
Patents
Dynamic Knowledge Transfer has been granted three software patents related to DyKnow.
