Slashdot Mirror


Internet Providers Band Together to Fight Evil

toadlife writes "A group of prominent Internet providers are teaming up with a security vendor Arbor Networks to form the Fingerprint Sharing Alliance. Through the use of Arbor Networks Peakflow SP internet appliance (which is an OpenBSD box with some secret sauce mixed in), members of the alliance can share internet threat information with each other in real time. It sounds a bit like Razor, doesn't it?"

4 of 116 comments (clear)

  1. Interesting Idea by xtracto · · Score: 2, Interesting

    From TFA: Arbor Networks added the Fingerprint sharing capability to Peakflow SP to allow companies to share attack fingerprints automatically without revealing any competitive information.

    The notion of "Fingerprints" is interesting, I wonder if this will really stop the spammers and other cyber-criminals.

    As for the revealing competitive information I dont care revealing anything these bastards could have, you know, they keep pissing people so, why have any consideration ??

    --
    Ubuntu is an African word meaning 'I can't configure Debian'
  2. hmm by Sv-Manowar · · Score: 4, Interesting

    This all seems to vague to work, a box that could be exploitable reporting "evil" acts to others, there's something missing here

    I can't see this working unless they make it more secure, and define what "evil" is

  3. MSIE Deletion squad by FidelCatsro · · Score: 4, Interesting

    Ok when i first read this , i had images of a bunch of guys in orange suits bursting into peoples houses and Instaling firefox and anti spyware software on windows machines, then just before diving out the window shouting "All in a days work Ma'am"

    After reading the story though , i must say "About fragleing time " .
    As the submitter mention razor ,which has been around for a good while i have been amazed how many ISPs are actualy doing very little about it , I have my theorys why some do so little (pay per bandwidth is becoming rather popular these days) though most are not like this.
    The sooner ISPs take a proactive(shudder jargon word) stand against offenders and start to disalow the traffic or manage problems (im aware many people are victums , but this gives them an alert that they have an infected PC ), the sooner we can start to enjoy our times online without fear of Spam or fear that our servers will be DDoS'ed into the ground.,

    --
    The only things certain in war are Propaganda and Death. You can never be sure which is which though
  4. Open Source "Appliance" using Snort + IPtables by mwilliamson · · Score: 3, Interesting
    Texas A&M University has put together an open source tool called NetSquid which can be put inline with your evil users (dorms). It then automagically identifies viral outbreaks (via snort rule matching) and cuts their access (using iptables) to everything except an internal Webserver to notify them of their infection. If they stop spewing viral traffic for a pre-set time, it allows them back on without IT staff intervention.

    http://netsquid.tamu.edu/