Re: mynetwatchman participation

[Jack Suess <jack () UMBC EDU>]

We have been receiving these reports pretty regularly the last month. At
first we were treating them as reliable reports (all reports were for
resnet machines) and were passing the notification on to the student to
get their machine cleaned. In a few instances when we investigated we did
not find what was reported. I had my security person contact the company
to talk to them about how they arrive at this. What we found is this is a
very small company and from the discussion my security office didn't want
to take their notification as definitive. Bottom line for us was too many
false positives.

Others may have had better luck.

jack suess


On Thu, 15 Apr 2004, Ken De Cruyenaere wrote:

> On Thu, Apr 15, 2004 at 09:41:33AM -0500, Barros, Jacob wrote:
> > Is anyone a mynetwatchman agent?  I just heard about this service and
> > wanted to know if any of you have experience with it.  Any concerns
> > about privacy and/or internal security?
> >
> > www.mynetwatchman.com
> >
> > Thanks
> >
> >
> > Jake Barros
> > Grace College
> >
> > **********
> > Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
> > http://www.educause.edu/cg/.
>
>
> I have it running on my home pc and on one of my office machines,
> using Zonealarm firewall logs. I have dshield (dshield.org) running on another.
> I found the Dshield log excerpts (which can be emailed to oneself)
> quite handy in identifying Blaster infected machines last year.
>
> I have no concerns about sharing the firewall logs and letting them
> deal with reporting problem machines.
>
> We've also occasionally received Mynetwatchman and Dshield reports identifying
> problem machines on our campus. They're informative and useful.
>
>  Ken
>
> --
>
>  Ken  De Cruyenaere    Computer Security Coordinator
>  kdc () cc umanitoba ca   Information Services & Technology
>  (204) 474-8340        University of Manitoba
>
> **********
> Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
> http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.