Verify If a Software or Driver Download Is Safe
You may decide you need a piece of new desktop software for your workstation, or a new driver to connect to a device (e.g. printer or instrumentation). Before you download and install the software or driver, please consider the risks. Western may already offer the software or have a different piece of software with the same functionality. For software we own, you can install it using the Windows Company Portal, and on a Mac, using the Self Service. Our desktop team will maintain the software and ensure it stays patched for security vulnerabilities.
If you we don't own the software you need or you need a new driver for a device, please request it using our Software Request Form. Please do this even if the software or driver is free or open source. ATUS and in some cases, our Security Information Office, will be doing some of the following checks:
- Is the app developed by a reputable vendor and how long has it been on the market? Is it still supported?
- How popular is the software? Is the app trusted by the community to perform its functions?
- Where is the app being sourced from? For example, in what country was the app developed?
- Is the download on the company or developer's site? If hosted on a third-party site, is it reputable?
- Is the application open source? If so, is the source from a valid repository?
- Who is compiling the application? If the party is not the developer, this may be suspicious.
- Does the executable have a good reputation on VirusTotal?
- Is the executable signed by the developer? A code signing certificate can verify the authenticity of the software or driver.
- Is there bundled adware or malware?
- How does the vendor generate revenue on this application? Does it depend on adware?
- Is there a licensing cost? Often "free" software is only free for individuals, not organizations like Western (e.g., MalwareBytes).
- Do we own the correct licenses?
- Does our Procurement Office have a contract for the software?
Also please note that any application installed on a Western managed workstation must be used for business and academic purposes only. Your Western managed workstation is property of the State of Washington, and not meant for personal use.