Technology news and Jobs arrow Telecommunications arrow Have your say in improving Internet security
Have your say in improving Internet security E-mail
by Stuart Corner   
Monday, 14 September 2009
The Internet Industry Association is developing an eSecurity code to help ISPs improve Internet security by checking customers' computers for malicious activity. It envisages ISPs being able, in extreme cases, to disconnect compromised computers. The IIA has invited comments on the draft version.

The primary aim of the code is to get ISPs to monitor customer computers connected to their networks for malicious activity, to identify any that have been compromised, and then to take appropriate action.

According to the draft code, "ISPs can typically find out about malicious activity and compromised computers in two ways: by active monitoring as part of normal network management activities; and/or by notification by trusted third party sources."(A list of sources is included with the draft code.)

The code then gives a list of suggested actions an ISP can take. Notify the customer directly (by phone or email); apply an 'abuse' plan where the customer's Internet service is speed throttled; temporarily suspend the customer's account until they advise that they have taken remedial action; place the customer's account in a 'walled garden' with links to relevant software/information pages that will assist them to clean-up their computers; temporarily suspend compromised ports/protocol activity; regenerate the customer's account password to prompt customers to call the helpdesk so they can be educated about the issue; in the case of Spam sources, apply restrictions to outbound SMTP; and/or provide the customer with a timeframe in which to take remedial access and if this is not adhered to, terminate their service.

Termination of a customer's service would generally only be suggested in the most extreme of cases, where the customer has refused to take action to resolve the situation, eg by installing anti-virus software, or where the amount of spam being sent via the customer's account is causing network impacts, etc.

ISPs signing up to the code would be required to make available to their customers a quite lengthy list of "steps to be taken to ensure that your computer and its associated hardware is fit for connection to the Internet."  They would also be entitled to use the IIA Security Friendly ISP Trustmark on their websites and other communications materials.

CONTINUED

This article first appeared in ExchangeDaily, iTWire's daily newsletter for telecommunications professionals. Register here for your free trial.
Register for ExchangeDaily




 
< Next story in category   Previous story in the category >
iTWire user statistics Visitors last 30 days
694,279
Subscribers 15,210
#1 independent technology news advertise here
  •   *  
  • Search
  • AdvSeach
  • Login
  • Events
  • FreeStuff

- Advertisement -

Featured Whitepapers

Follow iTWire on Twitter

About iTWire

iTWire is all about technology news, information, jobs and community for the IT and telecommunications industry professional. Subscribe to our free ICT daily newsletter