Role of ISPs in Customers' Security
In a post last Friday on disrupting botnets I argued that ISPs should have a greater role. At the same time I noted this wasn't an ideal solution and when it comes to implementation, there will be elements many of us won't like. The role of ISPs in combating distributed denial of service (ddos) attacks came up in during a panel discussion at a security conference and it showed some clear difference of opinions.
A report in Kazinform on the InfoSecurity Europe conference quoted panelists with distinctively different views on the question of ISP's responsibilities. Roberto Preatoni of Zone-H and WabSabiLabi argued:
"Actually, I don't think the ISPs should have any role in security," ... "In my opinion, that's like asking the Royal Mail to be responsible for the quality of your post."
Jason Creasey of Information Security Forum challenged that view:
"I believe ISPs can play a phenomenal role in security, with a little bit of legal pressure," he claimed.
Creasey's view is more in line with what I argued last week. ISPs have responsibility but that, along with their liability, needs to be clarified and codified.
.
Email This!
Digg it!
Sphere it!
Del.icio.us
Reddit!
Newsvine
