Educause Security Discussion mailing list archives

Re: Network Driver's License (was Re: several other threads)


From: Kevin Shalla <Kevin.Shalla () IIT EDU>
Date: Thu, 27 Feb 2003 15:15:00 -0600

There's a huge difference between Internet users and campus network
users.  I wouldn't attempt to take on a DMV style network license for the
general public, but would consider it for my network.  Employees here have
to take our rules or get fired.  Students here have to take our rules or
suffer sanctions for rule-breaking.  Faculty, er, well, can be influenced
to some degree.  Here's a bit of historical speculation, but I'm guessing
that back in the old days before drivers licenses, businesses which used
trucks certainly trained drivers on the proper rules of how to make the
deliveries, and not wreck the truck.  This could be the model we adopt
before "information safety" is taught as a standard course in elementary /
high schools.

At 02:50 PM 2/27/2003 -0500, you wrote:
Randy --

In what we call "real life", we need no license to read a newspaper or
to mail a letter or to make a phone call.  When you lose your driver's
license, you can still take out a library book or place a phone order
from the Barnes and Noble catalog.  To license basic network access is
to license activities that our society has always considered rights
rather than privileges.  Our solutions must be more granular.

On the other hand, the idea of a "License to Communicate" does have
some appeal.  Nothing fancy, just the basics, like awareness of simple
logic and simple manners.  Would do away with most radio call-in shows
and also most cell-phone users.

Steve
-----
At 11:44 AM -0500 2/27/03, Randy Marchany wrote:
>>But, it means that I have to have my virus patterns updated very often
(which
>>happens automatically), and we also have Antigen from Sybari on our
>>Exchange servers, so 99.9% of the emailed viruses never make it to my
>>desktop.
>
>So do we but I have copies of Trojan programs that still pass through AV
>filters undetected. We should never forget the trojan threat. That's why I
>fear the Office attachments.
>
>I have long said that users need to get a "Network Drivers License" before
>they get on the net. Nothing fancy, just basic awareness and good practices.
>The DMV model proves that a highly complicated piece of technology (a
car) can
>be used safely by the general populace once they pass a "driving" test. Why
>not do the same for people who use computers? There are car freaks who can't
>resist twiddling under the hood and there are people who just want the thing
>to start and get them to where they're going. Same with computers. Everyone
>knows to lock their car, keep the keys in a safe place, be careful who you
>lend the car to and yes, get the occasional speeding ticket. Why not the
same
>for computers?
>Yeah, people drive w/o licenses, the net shouldn't be regulated (I've heard
>all of this before) but the CONCEPT of raising user awareness before use
isn't
>that hard to grasp. We're spending too much time on the details of security
>and ignoring user education. Let's take a lesson from the DMV.
>
>Just my .02.
>
>        Randy Marchany
>        VA Tech IT Security Lab
>        VA Tech Computing Center
>        Blacksburg, VA 24060
>        540-231-9523
>        marchany () vt edu
>        http://security.vt.edu
>
>**********
>Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/memdir/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/memdir/cg/.


Kevin Shalla
Manager, Student Information Systems
Illinois Institute of Technology
<mailto:Kevin.Shalla () iit edu>

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.

Current thread: