Forest Global Training Partners

Cyber Risks · Krebs on Security

Naming and Shaming ‘Bad’ ISPs

Summary: Krebs describes a project, FIRE (Finding RoguE Networks), run by researchers at UC Santa Barbara that ranks ISPs by persistent malicious activity, scoring botnet command and control centers, phishing and malware exploit servers hosted at a given ISP for about a week or more, scaled by network size. Two major US-based networks, Houston-based ThePlanet.com and Plano, Texas-based Softlayer Technologies, appear repeatedly across reputation lists, and after Softlayer approached the UCSB team for suggestions, Stone-Gross said it went from consistently in the Top 3 worst to usually much lower on the list in about three weeks.

What's compelling: Krebs notes that some of the clearest nests of badness online are obscured from surface data collation efforts and require a far deeper dive to confirm, so the lists a security leader sees may understate what is actually hosted on a provider's network.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related