nanog mailing list archives
Re: mitigating botnet C&Cs has become useless
From: "Arjan Hulsebos" <arjan.hulsebos () gmail com>
Date: Tue, 8 Aug 2006 16:03:36 +0200
On Sat, 5 Aug 2006 17:17:27 -0400 (EDT), Sean Donelan typed:
Railroads have the railroad police. The Post Office has postal inspectors. Do we want to give ISP security the power to arrest people?
We (ISPs) already do have that power, we can disconnect misbehaving subscribers. And in cases like this, we should keep them off the 'net until they've cleaned up their PC. And besides doing that, we should educate our subs on how to properly maintain their PC (installing and keeping up-to-date antivirus software, patch the OS on a regular basis, you know the drill). I don't think hunting down the botnet operator is going to solve the problem. If I were to setup a botnet, I'd have many layers of machines (in as many different countries as possible) and protocols between me and the drones that do my dirty work. So, yeah, it can be solved (OK, to a large extend) by manpower, but as someone else already mentioned, it's a case of ROI. And, as usual, security is only costing you money..... Gr, Arjan H
Current thread:
- Re: mitigating botnet C&Cs has become useless, (continued)
- Re: mitigating botnet C&Cs has become useless Danny McPherson (Aug 05)
- Re: mitigating botnet C&Cs has become useless Sean Donelan (Aug 05)
- Re: mitigating botnet C&Cs has become useless Danny McPherson (Aug 05)
- Re: mitigating botnet C&Cs has become useless Aaron Glenn (Aug 08)
- Re: mitigating botnet C&Cs has become useless Barry Shein (Aug 03)
- RE: mitigating botnet C&Cs has become useless Bora Akyol (Aug 03)
- RE: mitigating botnet C&Cs has become useless Bora Akyol (Aug 03)
- Re: mitigating botnet C&Cs has become useless Mattias Ahnberg (Aug 03)
- Re: mitigating botnet C&Cs has become useless Simon Waters (Aug 08)
- Re: mitigating botnet C&Cs has become useless Mikael Abrahamsson (Aug 08)
- Re: mitigating botnet C&Cs has become useless Rick Wesson (Aug 08)
- Re: mitigating botnet C&Cs has become useless Mikael Abrahamsson (Aug 08)
- Re: mitigating botnet C&Cs has become useless Peter Dambier (Aug 08)
- Re: mitigating botnet C&Cs has become useless Sean Donelan (Aug 08)
- Re: mitigating botnet C&Cs has become useless Rick Wesson (Aug 08)
- Re: mitigating botnet C&Cs has become useless Sean Donelan (Aug 08)
- Re: mitigating botnet C&Cs has become useless Michael Loftis (Aug 09)