ISPs, take action

I CANNOT EVEN begin to count the number of calls and e-mails I receive from people asking how to stop scans and attacks against their systems that are connected to the Internet through cable modems or DSL. My answer is always the same: Report the offending IP address to your ISP, usually through abuse@isp.net, and hope for the best. Much more often than not, the user hears nothing from their ISP.

Free IT resource Virtualization Insights from Top Experts - Learn how virtualization gets real! Sponsored by Dell Free IT resource TechNet: More ways to know it, share it, and keep it running. Sponsored by Microsoft

Traditionally, ISPs are very hands-off regarding security issues. While I understand this is the "safe" approach, ISPs should at least educate their customers about Internet security issues.

I visited the Web sites of several broadband ISPs (Pacific Bell, AT&T Broadband, RoadRunner, EarthLink, Cox, and Prodigy) to see what security information they provide to users. The best site by far is AT&T Broadband. Its security information page ( http://help.broadband.att.com/legal ) includes contact information to report problems. None of the other ISPs provide this information.

Many of the other ISPs mention that security is an issue, but do not provide specifics, such as tips on how to secure your home system or network. EarthLink and Prodigy recommend Zone Alarm personal firewall software to their customers: EarthLink provides a 20 percent discount on Zone Alarm Pro and Prodigy provides a download of the free version. RoadRunner did not provide any security information that I could find, although its resellers did have a few pointers. My favorite is the Cox Communications Security FAQ ( http://support.cox.net/custsup/safety/securityfaq.shtml ) that discusses Windows 95/98 and NT 3.11 -- I think they need to get with the times.

What does this ISP discussion have to do with your company's security? As I have discussed previously, any remote access connection coming into your network becomes another security liability for all corporate systems and data (see "Bar the door," at http://www.infoworld.com/printlinks ). These remote endpoints need to be secured.

Since the ISP is most likely not helping with this process, your organization should be proactive by helping employees secure their home systems and networks, and by educating them on the importance of security. This becomes especially critical if your organization allows employees to use non-company owned assets to remotely connect to the network, assets that you cannot easily control.

At the most basic level, security administrators could host seminars explaining remote access dangers and ways to address security concerns. At the other extreme, you could require certain configurations and security measures before allowing remote access connectivity. Some companies even perform system and network security audits of employees' home networks.

A proactive approach to end-user security can have lasting benefits, including employees who want to be more active in the security process. If you make it a game or contest, even more people may be inclined to participate while you foster a security-conscious work environment.