Re: on the university problem

[Jeff Kell <jeff-kell () utc edu>]

Sean Donelan wrote:
> On Sun, 12 Aug 2007, Jordan Wiens wrote:
> > Now if anyone wants to gather some /real numbers/ showing Universities
> > are or aren't more of a problem, maybe we can stop making up guesses
> > one way or the other.
>
> Universities are probably not any more OR less of a problem than any
> other organization with connections to the Internet.  Fortune 1000,
> government, non-profits, for-profits, domestic, international, etc.  You
> name it and they probably have had, have or will have a problem.

Universities are just the low-hanging fruit of the statistical research, if you define "research" as Googling a term 
with "site:.edu".

Unfortunately there is no easy way to Google "site:.massive-moneybags-ISP" or "site:.broadband-whores" or 
"site:.latest-telecom-mergers".

Rather than googling, how about cross-referencing infections/malware/badness-of-your-choice IPs to reverse DNS or ASNs 
and see how many universities you come up with?

How much (%-wise) spam comes from university-owned IP space?  how many phishing sites?  how many botnets?  What 
percentage of all .edus contribute to these numbers (now that the requirements for a .edu have dropped significantly)?

Jeff 

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.