Educause Security Discussion mailing list archives
Re: Network Driver's License (was Re: several other threads)
From: Steve Worona <sworona () EDUCAUSE EDU>
Date: Thu, 27 Feb 2003 14:50:47 -0500
Randy -- In what we call "real life", we need no license to read a newspaper or to mail a letter or to make a phone call. When you lose your driver's license, you can still take out a library book or place a phone order from the Barnes and Noble catalog. To license basic network access is to license activities that our society has always considered rights rather than privileges. Our solutions must be more granular. On the other hand, the idea of a "License to Communicate" does have some appeal. Nothing fancy, just the basics, like awareness of simple logic and simple manners. Would do away with most radio call-in shows and also most cell-phone users. Steve ----- At 11:44 AM -0500 2/27/03, Randy Marchany wrote:
But, it means that I have to have my virus patterns updated very often (which happens automatically), and we also have Antigen from Sybari on our Exchange servers, so 99.9% of the emailed viruses never make it to my desktop.So do we but I have copies of Trojan programs that still pass through AV filters undetected. We should never forget the trojan threat. That's why I fear the Office attachments. I have long said that users need to get a "Network Drivers License" before they get on the net. Nothing fancy, just basic awareness and good practices. The DMV model proves that a highly complicated piece of technology (a car) can be used safely by the general populace once they pass a "driving" test. Why not do the same for people who use computers? There are car freaks who can't resist twiddling under the hood and there are people who just want the thing to start and get them to where they're going. Same with computers. Everyone knows to lock their car, keep the keys in a safe place, be careful who you lend the car to and yes, get the occasional speeding ticket. Why not the same for computers? Yeah, people drive w/o licenses, the net shouldn't be regulated (I've heard all of this before) but the CONCEPT of raising user awareness before use isn't that hard to grasp. We're spending too much time on the details of security and ignoring user education. Let's take a lesson from the DMV. Just my .02. Randy Marchany VA Tech IT Security Lab VA Tech Computing Center Blacksburg, VA 24060 540-231-9523 marchany () vt edu http://security.vt.edu ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/memdir/cg/.
********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/memdir/cg/.
Current thread:
- Re: Network Driver's License (was Re: several other threads) Steve Worona (Feb 27)
- <Possible follow-ups>
- Re: Network Driver's License (was Re: several other threads) Randy Marchany (Feb 27)
- Re: Network Driver's License (was Re: several other threads) Steve Worona (Feb 27)
- Re: Network Driver's License (was Re: several other threads) Kevin Shalla (Feb 27)
- Re: Network Driver's License (was Re: several other threads) Gerald N Flynn (Feb 27)
- Re: Network Driver's License (was Re: several other threads) Gerald N Flynn (Feb 27)