North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Quarantining infected hosts (Was: FBI tells the public to call their ISP for help)

  • From: Sean Donelan
  • Date: Mon Jun 18 11:33:30 2007

On Mon, 18 Jun 2007, Suresh Ramasubramanian wrote: 
The best answer is probably paying for a strong ISP abuse team.  But for
whatever reasons, some ISPs prefer to invest in other areas.


Bah. Not to underrate having a strong and clued abuse team. However,
throwing more people at this is a non starter.  You need to automate.

Automation is a non-starter unless you have people to deal with the exceptions. If you don't deal with exceptions, eventually problems with any automated system will overwhelm you. You can only hid behind IVR recordings "You call is very important to us" for so long.