Cyber Risks · Krebs on Security

FCC May Confront ISPs on Bot, Malware Scourge

Summary: The FCC is weighing new initiatives to push Internet service providers to clean up bot-infected PCs and malicious Web sites on their networks, including an opt-in ISP 'code of conduct' and rules to shorten remediation time for malicious hosts and phishing or spam sites, as part of a Cybersecurity Roadmap due in January 2011. Comcast had begun deploying a bot-notification service to all 16 million of its customers, and Microsoft's Scott Charney proposed ISP industry standards built on a public health model, including device 'health certificates' backed by hypervisors and Trusted Platform Modules.

What's compelling: Charney's proposal would require consumer devices to present a health certificate as a condition for Internet access, with remedies such as bandwidth throttling for machines spewing malicious packets - a model that depends on trusting the certificates and keeping them from being repurposed for other online policing.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related