IRIS Chrome extension security report

What is IRIS? IRIS Invigilation (IRIS) is a software program that helps provide educators assurance of assessment integrity during online and remote assessment. It records audio, video, and computer screen activity for the duration of a test/exam. It analyses this information using machine learning and automatically flags potential academic dishonesty through displaying the data in an easy to use reporting dashboard. How does it work? IRIS records video of a student's face throughout their proctored exam tracking head and eye movement. It records the audio from the student computer’s microphone video from their webcam and takes successive screenshots of what the student is seeing on their computer screen. Facial markers are identified and tracked; categorising and distinguishing innocent behaviours from dishonest behaviours. Educators can then review this data at a time that is convenient to help ensure student identity verification and assessment integrity. Is it safe for students to share their data? IRIS Invigilation software is a safe, secure and necessary method of maintaining academic integrity at a university/institute. The proctoring/invigilation of online assessments is necessary when conducting online learning to ensure educational standards are maintained and to avoid academic dishonesty. Students that share their data are helping to protect the quality and reputation of their institution. The privacy and protection of students and their personal information is paramount. IRIS ensures that data security, protection laws, privacy legislation and regulation are their priority. IRIS uses AWS Cloud Security to protect data and host all data in Sydney, Australia. IRIS does not sell or use any student assessment data; only IRIS technical administrators have access to this for maintenance and security purposes. IRIS Security Infrastructure: • Two-factor authentication is enabled for the cloud services account that hosts IRIS • Strict firewall schemes protect all IRIS related services to protect user data and prevent nefarious access to the IRIS infrastructure • Only ports and services that need to communicate with each other and to the outside world will be kept open. These ports/services have strict IP security groups for inbound and outbound traffic • IRIS will never share or sell your personal data to a third party. • Google Chrome will ask your permission before installing the IRIS extension on your computer. • IRIS will only invigilate you during your exam. The permissions you agree to are only for the exam duration.