Re: spyware defense trick

[Jere Retzer <retzerj () OHSU EDU>]

Out of curiousity, do you/your university consider spyware a minor
nuisance that your users need to deal with or something more serious
that should be dealt with at an institutional level? A recent article in
one of the trade papers said that institutions worried about privacy
directives are concerned and looking for ways to actively address
spyware. I've wondered for sometime if HIPAA should induce some action
on our part. It seems like, in theory some of these agents could expose
protected health information (PHI) although I know of no cases where
this has happened, so I do not think we have a validated threat.

Thanks

> > > Travis_Niedens () REDLANDS EDU 5/4/2004 10:50:25 AM >>>
I have thought about doing this, however, I have noticed that some
Spyware
products like HotBar just use the IP address vs. a name.

Travis

-----Original Message-----
From: Gary Dobbins [mailto:dobbins () ND EDU]
Sent: Tuesday, May 04, 2004 10:47 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] spyware defense trick

Is anyone using, or considering, using campus DNS to misdirect
hostnames of
known spyware-installing sites, as a way to stem the tide of this
nuisance?

We're handling many "infected" machines, to the point where the cost
is
becoming a burden.  Some systemic defense is called-for.

--

   ------------------------------------------------------------
   Gary Dobbins, CISSP -- Director, Information Security
   University of Notre Dame, Office of Information Technologies

**********
Participation and subscription information for this EDUCAUSE
Discussion
Group discussion list can be found at http://www.educause.edu/cg/.


**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.