ISAE-SUPAERO

HyFlex for students

Anne-Lise Luga, Laurent Dairaine, Thierry Parisot — 2020-10-01T10:45:37Z

The HyFlex@isae-supaero system simplifies the use of flexible, hybrid pedagogical scenarios: conventional course sessions focused on the students present in the classroom and others who have remote access to the course. It is designed for the teaching staff and students at ISAE-SUPAERO.

A complete website concerning HyFlex@isae-supaero can be accessed here: HyFlex@isae-supaero.

Regularly updated FAQs are available at the end of the page.

LIVE Service: direct, live access to the course

The LIVE service offered by HyFlex enables students to remotely follow courses held in equipped rooms on the ISAE-SUPAERO campus (some forty rooms).

The system uses ZOOM for real-time streaming. You therefore have to install the ZOOM client on your digital terminal (PC, Mac, Smartphone or Tablet) from this URL. You must use your ISAE-SUPAERO address to create your ZOOM account, as indicated below.

.@student.isae-supaero.fr

You can also add a photograph so you can appear personally during exchanges. Once your computer system has been configured to connect to a ZOOM web conference, you are ready to follow a HyFlex course.

The first step is to find out what time the course is scheduled for and in what room. For this, use the CALIFOR scheduling service.

Once you have determined the time and place, you need to join the course LIVE when it starts. For this, go to the LMS and find the room corresponding to your course in the hierarchy under the heading HyFlex LIVE. or click on the following icon:

For example, the space linked to room 61.110 is illustrated in the following screen shot.

The gray icon here indicates that the course hasn't started yet. It will turn blue and will start flashing when it starts.
Then all you have to do is click on the icon to join the LIVE transmission automatically. You are connected!

You are not allowed to disclose the details of the LIVE conferences to third parties who are not concerned with this course.

REPLAY Service: 72-hour deferred access

The REPLAY service provides access to recorded courses for 72 hours. Once the course is over, it is automatically uploaded to the space that is accessible to students in the class whose program corresponds to the course transmitted via HyFlex.

For access to this space, you need to use your terminal (PC, Tablet or Smartphone), be connected to the Internet and use Nextcloud. The directory in question is located in the “External Storage” item, which can be accessed directly by clicking on the following icon.

Once you are in the HyFlex directory connected to your class, identify the course you want to view and click on the link. The video will start up automatically.

Video document names are structured as follows:

YYYMMDD-HHMM--[-][-][-[+]]

Example 1: 20200901-0912-61_110-SUP2-G1-BE_Calcul.mp4 for a course given on 01 September 2020 at 9:12 to SUPAERO class 2A, group 1 in 6110, titled BE Calcul.
Example 2: 20200901-0912-61_110-MAE1-TP_Computers_Jane_Doe+Jean_Dupont.mp4 for a course given to the MAE 1 class, in 6110, titled BE Compute by Jane Doe and Jean Dupont.

Downloading and transmitting video files is forbidden, only on-line consultation is authorized.

Using the video projector and the audio system in a HyFlex classroom

You can use the video projection and audio system in HyFlex classrooms. For this:

Switch on the audiovisual system in the room;
Connect your equipment (Windows PC, Linux PC, Mac, etc.) to the HyFlex system with an HDMI adapter;
Configure it if necessary (some systems are configured automatically) to switch the audio to HDMI (in your settings, it may show up as HDMI, DisplayPort or Elgato);
Exclusively use PROJ mode on the HyFlex keypad;
Use your PC as normal; it will be transmitted onto the video projector using the PC scene. You can also use the CAMera or BOARD scenes.

Only PROJ mode, which provides local use of the system (no retransmission, no recording), can be used without officially booking the HyFlex room.

After use, press on the HyFlex icon indicating HOME and turn the video projector off.

The HyFlex system, including the display tablet, manages standby on its own. Do not turn it off!

FAQs - Frequently asked questions

I saw that the system was still on at the end of the class: should I turn it off?
The system is fully automatic: don't turn it off. An automatic standby system will quickly take over.

Who can use the HyFlex system?
Its main use is for teaching based on knowledge transmission, so the users are ISAE-SUPAERO instructors.

How Can I hook up my PC for projection in a classroom?
You have to connect your PC to the HyFlex system and choose PROJ mode to use the video projector in the room.

How do I access 72-hour REPLAY?
The videos are automatically classified by class program for which the course was given, directly accessible to the students in the corresponding class. Caution, the instructor may not want to record certain courses, so there will not be any REPLAY in this case.

The LIVE audiovisual quality isn't great
We are well aware of this problem, which is mainly due to a reduction in the quality of the service offered by ZOOM in order to be able to cover the intense use of their servers. This reduction in quality is generalized and beyond our capacity for action. Nonetheless, we are currently working on the integration of an alternative solution using live streaming so as to have LIVE transmissions with the same quality (or almost) for REPLAY (which has HD quality).

I don't want to appear in the video
If you are a remote viewer, don't turn your webcam on. If you are in the classroom, the HyFlex system has a webcam turned toward the instructor and the board. Caution, at the end of the course, make sure the instructor hasn't forgotten to press STOP before moving or talking around the camera.

Further information & support

The HyFlex website gives some additional information for following HyFlex courses:

Using HyFlex@isae-supaero for students

If you have any difficulties or suggestions on using HyFlex, create a DESK ticket or click on the following icon.

Configure ISAE-SUPAERO mails, calendars and contacts

Bruno Ilponse — 2019-03-27T13:29:06Z

Using exchange

Navigate to the phone parameters then in accounts.
Click on Add account :

Choose the account: Microsoft Exchange ActiveSync :

Enter your email address and ISAE-SUPAERO password then choose Manual setup :

On the next screen update some information.

Username : your username
Exchange host name: wali-m.isae.
Click on Connect.

In case of problem, contact the ISAE-SUPAERO IT support service.

Without exchange

If your device does not support the exhange protocol, you can configure incoming and outgoing mails manually :

IMAPS (Incomming mails)
- Hostname : email.isae.fr
- Username : firstinitial.lastname
- Use SSL
- Port : 993
- Email address : firstname.lastname@student.isae-supaero.fr

SMTPS (Outgoing mails)
- server name: smtps.isae.fr
- Use SSL
- Username : firstinitial.lastname
- Port : 465 (or 587)

FAQ about new MFPs

2019-01-25T16:28:04Z

Why do we change?

We implement Multifunctional Printers (MFPs) that provide a level of service without comparison (maintenance contracts, scan and copy capability, performance and advanced features) for lower usage costs.

How will the operation unfold?

On the first day, your old printer is removed and the next day your new MFP is brought into service.
The schedule was organized to shorten service interruptions and to ensure that printing facilities remain, as far as possible, available in the buildings concerned.
Interruptions should not exceed 24 hours.

What will change for me?

In order to print a document, choose the default printer “FollowME”.
Then just identify on any Toshiba MFP using your ISQE badge to print your document. The only real change is that you'll have to think about taking your badge for each print.

And what is “FollowMe”?

FollowMe is THE big improvement, that's what will make your life easier. FollowMe is your default printer and with your badge you can print on all Toshiba ISAE MFPs. FollowMe follows you in your travels and lets you choose the printer where there are the least people to save time.

Do I have to install FollowMe?

After commissioning, FollowMe will be directly configured in most cases on Windows PCs.

for WINDOWS:
Once commissioning has been validated, access to the new MFPSs on the “followme” queue will be directly configured in most cases on Windows PCs.

If you're a student, you might have to setup a new printer: \nova\FollowMeStudent

* for MACs:
For macs: the deployment and configuration of the “followme” queue has been done on your machines; unless you have a specific problem, you can choose this queue for your impressions now (and therefore use all new MFPs)
for LINUX:
The principle, via the print management tool “CUPS” available on all LINUX machines (and on macos) is:

declare a new network printer named lpd: // nova / followme on your machine, (to refine if you use a different login of your ISAE account on your LINUX machine, see procedure below)
to get the driver from ftp://depozit.isae.fr/Followme.ppd
and finish the setup of this printer by completing some options
The following procedure is a step-by-step procedure for setting up the new “followme” printer on your machines.

How do I print?

The new default printer on your machine is called “FollowMe”.
Then just identify using your ISAE badge on any MFP to output the prints.

How do I scan a document?

Thanks to FollowMe, no need to send an email, choose the option “File” and the document is simply sent to your Home Directory (H :)

What if I need help?

More info here => Video Lab
For any question, any request for connection to the MFPs or any problem, contact the CS, if possible, through a ticket, and, as a last resort by phone. If possible, please group requests for your entity.
CS contacts:
tel: 05 61 33 89 89
tickets: via icampus DESK -> digital computer

IT Best practice for security

Laurent Dairaine — 2017-08-24T08:32:00Z

[fr]

Introduction

While digital services are now an important part of our personal and professional lives, security is too rarely taken into account. However, these new technologies are pervasive and introduce new risks for businesses and public institutions. For example, the most sensitive data (scientific research, contracts, personal data ...) can be stolen by IT attackers or recovered in the event of loss or theft of a smartphone, tablet or laptop.

Computer attacks are often accompanied by severe repercussions in terms of security, economic and financial losses and degradation of the image of the targeted institutions. These dangers can nevertheless be greatly reduced by a set of good practices, which are inexpensive or even free, and easy to implement. Therefore, the sensitization of ISAE-SUPAERO employees and students to the rules of best IT practices is fundamental and above all very effective in limiting a large part of the risks.

Password

The password is an authentication method used in particular to access an information system and its data. To protect your information, choose passwords that are difficult to find with automated tools or to guess by a third party.

How to choose a good password?

Choose password of at least 12 characters of different types (Uppercase, lowercase, digits, special characters). Your password must be without any relation to your personal identity (name, date of birth...) and must not exist in a dictionary. Two easy methods can help you choose a password:

The phonetic method:
« I bought 5 CDs for one hundred euros this afternoon » ⇒ Ib5CDsfoh€ta

The first letter method:
« Allons enfants de la patrie, le jour de gloire est arrivé » ⇒ aE2lP,lJ2Géa

Allthough these two methods produce very strong passwords they aren't necessarily easy to remember. An other method, diceware, allows to create strong passwords which are easy to remember.

The diceware method:

Have a 6-sided die.
Run the die 5 times and mark the resulting numbers down
Repeat the operation 5 times to get 5 sets of 5 digits
Consult the list of words ( FR , EN ) to retrieve the 5 matching words
Your password is ready! You can adjust it slightly.

ISAE Password Rules
Your password must comply with the following rules:

Be at least 12 characters long
Include at least 2 of (lowercase, uppercase, digits, symbols (except @, spaces and accented characters)
Do not contain too many identical characters
Do not be a word from the dictionary
Do not look like your login
Be different from your current password

Password best practices

It is preferable not to use password storage tools.
It is important not to write your password on a piece of paper.
It is essential to use a different password for each service. Passwords protecting professional services should never be reused for personal services.
Change your password when you are returning from a trip outside of France.

When can I use my credentials safely?
You must use your IDs only for the official IT-systems of the ISAE. These few simple rules can help you to check whether or not to use your credentials.

When accessing a web application, the connection must, in most cases, go through the CAS of the institute.

For all connections from a website (CAS, ... ) check the presence of the green padlock followed by ISAE (FR)

When connecting from an ISAE workstation, as well as for any business & organizational application installed and configured by the IS.

The IT service desk can help you out in case of doubt about the use of your identifiers.

Computer Account & User Session

The computer account is the digital identity of a person at ISAE-SUPAERO and its associated data. The user session is a personalized work environment containing your settings and personal data. The access to your user session is protected by an authentication step requiring a password.

It is extremely important to SYSTEMATICALLY lock your user session when you leave your workstation.

Cosinus allows you to change your password and your account information Cosinus.

Digital Identity
A computer account, by means of an identifier and in particular an e-mail address, constitutes a digital identity. The IT account issued by the IT-service constitutes a professional digital identity. Your Internet service provider (Orange, SFR, Bouygues, ...) or any other public digital service provider (Google, Microsoft, La Poste, etc.) can provide you with an account that constitutes your private digital identity. It is essential to distinguish these two digital identities and their uses:

Never use your professional digital identity for private use.
Never use your private digital identity for professional use.

The acceptable use policy of the Institute's IT System tolerates the occasional and reasonable use of ISAE IT resources for private purposes.

Data Hosting and Backup

Hosting and backup of data, including sensitive data (research data, personal data, etc.), is a very important element in the ISAE-SUAPERO IT security.

Local Hosting and Backup
By default, all ISAE workstations provide access to a personal network disk corresponding to the connected account as well as the different network disks related to your function within the ISAE-SUPAERO (research department, administrative service, etc.).
Every ISAE-SUPAERO workstation is configured to perform a regular backup of your data (images and other multimedia data are not included in these backups).

It is preferable to host all your data on the concerned network shares.
Do not use removable media (USB keys, CD-ROM, USB disk) to backup your data.

Using Clouds
The use of public cloud services is prohibited at ISAE.

It is forbidden to create and use these services with your professional digital identity.
It is forbidden to host professional data using your private digital identity.

Removable Storage Media

It is preferable to consult the service center before inserting a storage medium of which you do not know the provenance in your workstation.

The service center can help you to analyze the presence of malicious software on a USB key or any other external storage device

Nomadic use

Backup of locally hosted data on your workstation may no longer work, consider using iBOX to store and backup this data.

iBox allows you to access files on your ISAE account and share files on the Internet iBox .

Nomadism

The use of laptops, smartphones or tablets facilitates business travel, as well as the transport and exchange of data. However, traveling with such mobile devices, introduces threats to sensitive information, of which theft or loss would have a significant impact on the activities of the institute.

Basic rules for nomadic ressources

install only the necessary applications and check to which data they can access before downloading (geographical information, contacts, phone calls...).

Some mobile applications require access to data which is not necessary, you should avoid installing them

In addition to the PIN code that protects your sim card, use a scheme or password to secure the access to your smartphone and configure your smartphone to lock automatically.
Make regular backups of your contents on external media so that you can recover them when your device is restored to its original state.
* Do not save your passwords.

The IT service-desk can help you out when you are not sure about a mobile application or how to configure your smartphone

Before you go on a mission

If you have to leave the European Union, only use the hardware (computer, removable media, telephone) dedicated to the mission and containing only the necessary data.

At the ISAE travel devices are available for your missions abroad. You can request it on Desk .

Make a backup of the data you take with you, to recover it in case of loss or theft.
If you plan to take advantage of a trip to work on sensitive data, carry a screen protector for your computer.

At the ISAE screen protectors are available on request from the IT service-desk, make your request on Desk .

Apply a distinctive sign (such as a colored dot) on your devices to ensure that there has been no exchange during transport.
Verify that your passwords are not saved.

During the mission

Keep your devices, media and files with you, during your trip as during your stay (do not leave them in an office or in a hotel safe).

At ISAE specially designed backpacks for laptops are available on request from the IT service-desk, make your request on Desk .

Disable Wi-Fi and Bluetooth on your devices.
Remove the SIM card and battery if you are forced to be separated from your phone.
Inform the IT service-desk if your equipment is inspected or seized by foreign authorities.
Do not use any device you are offered (such as USB keys) if you can not have them checked by a trusted security service.

Free USB keys often contain malicious code

Avoid connecting your equipment to distrustful devices or networks.
Refuse the connection of devices belonging to third parties to your own equipment (Smartphone, USB stick, Walkman ...)

After the mission

Clear call and navigation history;
Change the passwords you used during the trip;
Have your equipment analyzed after the mission, if you can.
Never use USB sticks that may have been offered to you when traveling (fairs, meetings, trips ...): highly prized by attackers, they are likely to contain viruses.
e-Mail

E-mail, is a the first vector of many computer attacks.

SPAM
Traditional SPAMs are not a real threat to the user per se. Current techniques make it possible to detect them relatively well.

At the ISAE, SPAM detected by our server is tagged by a

Phishing
Phishing is a technique used by attackers, generally usurping the identity of a third party or simulating a site in which you a priori trust (a bank, a commercial site, etc.) in order to obtain confidential information, and then use it, for more complex attacks.
The following few rules can help you detect a phishing attack:

Do not blindly trust the name of the sender of the messages you receive
Check the existence of the sender in case of doubt (ISAE Organnuaire, etc.)
Be carefull with attachments
Never respond to a request for confidential information (Password, etc.), know that the SI will never ask you for your password
Hover your mouse over any link to check the actual destination of the link at the bottom of your screen
Pay attention to the accented characters in the text as well as to the quality of the English or the language used by your interlocutor
Correctly configure your e-mail software (if possible).

Undetected SPAM or Phishing
In case you receive a message of this type which is not tagged |SPAM|, you can report this incident yourself: therefore, as it is explained here, you must redirect the fraudulent e-mail to mail.spam@isae.fr (be careful not to “forward” or you will be considered as the spammer yourself!).

This procedure allows our engine to better recognize these illegitimate e-mails. You hereby actively participate in the Institute's anti-spam fight.

Pedagogical Phishing
In order to improve your reflexes and sharpen your discernment at the receipt of a questionable e-mail we regularly organize pedagogical phishing campaigns. These campaigns only send false phishing, so you won't risk anything. The principle of these campaigns is the following:

At the beginning of each campaign we send a message to inform all target users of the campaign,
During the days or weeks following this message you are likely to receive an phishing e-mail (this phishing can take different forms),
If you open the message, its attachment or a link inside it, our system logs your action (we never record sensitive data, such as passwords that you are likely to enter into a non-legitimate form.),
At the end of each campaign we communicate the results of the campaign (without disclosing the identity of the people) to all users,
Awareness-raising sessions are organized as these campaigns progress.[en]