Information Security Office

Office of Information Technology

Sensitive Number Finder > Mac / Unix / Linux Users

UTSA has been tasked with identifying files on all university systems that may contain social security numbers (SSN).  The systems range from server shares to local desktop systems.  IT Security has provided the Senf application as a tool to help identify social security numbers numbers.

All system users are tasked with doing their part in to identify sensitive information stored on their computer systems or network shares.  Instructions have been provided to help assist in the running of this tool.  If you are requiring additional assistance please feel free to contact Information Security Office.

Lance Pritchard - 458-7218
Michael Baland - 458-7216
Homero Torres - 458-5890
Annette Evans - 458-5899
Help Desk - 458-5538

SENF

Use Senf (Sensitive Number Finder) to identify SSN’s (Social Security Numbers) and CCN's (Credit Card Numbers)  that may be stored on your computer system and I drive.

Senf is a number finder that has been created to seek out sensitive numbers such as social security numbers and credit card numbers.  Since Senf is designed to identify number patterns that are formatted like social security numbers or credit card numbers, the tool has the potential to report false positives.

Windows Install Click Here

1. Obtaining Senf

The tool must be present on your desktop system to run.  Instructions on how to get the Senf tool is provided here.

2. Installing Senf

The Senf tool must be obtained first before installing it on your workstation.  Installation does not require administrative rights on your system.

3. Configuration

Configuration of the Senf tool is important as to reduce the number of false reporting and streamlining the scanning process.

4. Running Senf

Once you have configured the Senf tool, you can conduct your scan.  The scan will not interfere with your work and can be run in the background.

5. Report Findings

1. How to Get the Tool

Download

Download the file below.  The file is specifically for Mac or Linux systems.  Select the link and save it to your desktop.  If you require additional instructions on downloading, please go here.

Maitogai.270 Linux / Unix / MAC download

Installation of Senf

Linux / MAC

After downloading the Senf tool, the files should be extracted onto your desktop automatically and named "senf".  No further action is required for the installation phase.

How to Run the Tool

LINUX/MAC

1. Open a command Shell (terminal) window.  This can be located under Applications --> Utilities.  The name of the application is "terminal" as shown below.

2. Navigate to the folder in which Senf is installed.  If the downloaded Senf tool is located on your desktop, change directory to the "Desktop" folder under your username.  Once you have navigated to the "Senf" folder, run the syntax as described in step 3.

3. Enter the following syntax: java -jar senf.jar -p ~/  -o <hostname_date> (i.e.. java -jar senf.jar -p ~/ -o UT123456_05032007)

This will run a scan on the entire system drive and create output to a specified file name.  The -o (letter o) option outputs the findings to a log file.  When naming the log file, an extension does not need to be specified.

Also, note that this program may take a while to complete; again, by default, the only things it prints to the screen are possible matches (i.e. no errors), so it may look like it's frozen, not printing anything for a while, but it's (probably) not.

The scan can take a while, but should not hurt the system performance of your system.  You can minimize the Senf tool and run it in the background as you work.  The match information will tell you how many possible files contain SSN's or CCN's.

Report Your Findings

If the file doesn't have any SSN's and/or credit card numbers your done.  You do not need to report.

If you save the SSN's to external media and keep the media in a secure area, you do not need to report. 

If you find SSN's and no longer need them, please delete them. No reporting is required.

If you maintain the SSN's file(s) on the computer please complete the form send to the SSN Coordinator-Annette Evans, University Heights, room 1.216E

Justification for maintaining Social Security Numbers Form

Additional Information

Syntax

Usage: Senf [OPTIONS]

By default, Senf only prints to the screen files which are matched -- not all output is shown.

Examples

To search all files in your home directory in Linux/Mac OS X

• java -jar senf.jar -p ~/

To search all files in your home directory in Windows XP

• java -jar senf.jar -p "C:\Documents and Settings\<yourname>"

To scan only files <= 100MB, ensure that each one has at least 12 matches before marking it as possible, display error messages, and start in a folder called C:\mustard\gruga

• java -jar senf.jar -f 100m -m 12 -e -p "C:\mustard\gruga"

Additional Resources

https://source.its.utexas.edu/groups/its-iso/projects/senf/wiki/SenfReadme

Windows Install Click Here

©The University of Texas at San Antonio One UTSA Circle San Antonio TX 78249
Revised: 02/01/2008
Refer Comments to: oit@utsa.edu
Identity Guidelines | Policies | Emergency Preparedness | Required Links