Technology news and Jobs
Telecommunications
Have your say in improving Internet security
Telecommunications
Have your say in improving Internet security | Have your say in improving Internet security |
|
| by Stuart Corner | |
| Monday, 14 September 2009 | |
|
Page 1 of 2
The Internet Industry Association is developing an eSecurity code to help ISPs improve Internet security by checking customers' computers for malicious activity. It envisages ISPs being able, in extreme cases, to disconnect compromised computers. The IIA has invited comments on the draft version.Featured Whitepaper
5 Best Practices for Smartphone Support
According to the draft code, "ISPs can typically find out about malicious activity and compromised computers in two ways: by active monitoring as part of normal network management activities; and/or by notification by trusted third party sources."(A list of sources is included with the draft code.) The code then gives a list of suggested actions an ISP can take. Notify the customer directly (by phone or email); apply an 'abuse' plan where the customer's Internet service is speed throttled; temporarily suspend the customer's account until they advise that they have taken remedial action; place the customer's account in a 'walled garden' with links to relevant software/information pages that will assist them to clean-up their computers; temporarily suspend compromised ports/protocol activity; regenerate the customer's account password to prompt customers to call the helpdesk so they can be educated about the issue; in the case of Spam sources, apply restrictions to outbound SMTP; and/or provide the customer with a timeframe in which to take remedial access and if this is not adhered to, terminate their service. Termination of a customer's service would generally only be suggested in the most extreme of cases, where the customer has refused to take action to resolve the situation, eg by installing anti-virus software, or where the amount of spam being sent via the customer's account is causing network impacts, etc. ISPs signing up to the code would be required to make available to their customers a quite lengthy list of "steps to be taken to ensure that your computer and its associated hardware is fit for connection to the Internet." They would also be entitled to use the IIA Security Friendly ISP Trustmark on their websites and other communications materials. CONTINUED
This article first appeared in ExchangeDaily, iTWire's daily newsletter for telecommunications professionals. Register here for your free trial.
![]() |
| < Next story in category | Previous story in the category > |
|---|










