Sean Donelan wrote: > On Sun, 12 Aug 2007, Jordan Wiens wrote: >> Now if anyone wants to gather some /real numbers/ showing Universities >> are or aren't more of a problem, maybe we can stop making up guesses >> one way or the other. > > Universities are probably not any more OR less of a problem than any > other organization with connections to the Internet. Fortune 1000, > government, non-profits, for-profits, domestic, international, etc. You > name it and they probably have had, have or will have a problem.
Universities are just the low-hanging fruit of the statistical research, if you define "research" as Googling a term with "site:.edu". Unfortunately there is no easy way to Google "site:.massive-moneybags-ISP" or "site:.broadband-whores" or "site:.latest-telecom-mergers". Rather than googling, how about cross-referencing infections/malware/badness-of-your-choice IPs to reverse DNS or ASNs and see how many universities you come up with? How much (%-wise) spam comes from university-owned IP space? how many phishing sites? how many botnets? What percentage of all .edus contribute to these numbers (now that the requirements for a .edu have dropped significantly)? Jeff _______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.
