Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Top Open Source Security Tools | Main | Establishing an Organizational Security Framework »

ISPs Need to Respond to Botnets

If the bad guys aren't bad enough, the good guys (or at least neutral) guys in the malware battle are not helping these days. I'm talking about ISPs who turn a blind eye or respond slowly to reports of botnet activity. The Register reports:

Talk to anyone who makes a living sniffing out online fraud, and you'll hear the same story over and over. Researcher uncovers the source of a massive amount of spam, identifies an IP address that is part of a botnet or stumbles upon a phishing site that's spoofing a trusted online brand. Researcher dutifully reports the incident to the internet service provider whose network is being used, only to find the bad behavior continues unabated for days, weeks and even months.

A lack of engagement from ISPs is nothing new, but it has continued even as the malware scourge makes steady gains.

Botnets are spewing out spam, launching data theft attacks (like the recent eBay attack) and they are growing so large they rival supercomputers in raw power. It is in the ISPs own best interest to shut down these spam machines which just suck up bandwidth. I wonder how much bandwidth could be recovered if more botnets were shut down? Would Comcast have to continue to shut down download hogs?

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/420

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net