[nsp-sec] [nsp-sec-d] Verizon CTO: Bots and other stuff

[Daniel Schwalbe]

Thanks for the back-story. That's obviously info the CT/vzb sales folks don't 
advertise. They sure sang a different tune when we met with them recently :-/

 	-Daniel



On Fri, 28 Mar 2008, Chris Morrow wrote:

> 
> 
> On Thu, 27 Mar 2008, Daniel Schwalbe wrote:
> 
>> ----------- nsp-security-discuss Confidential --------
>> 
>> 
>> Verizon Business recently acquired Cybertrust, which now is in the
>> business of analyzing flows traversing the Verzion owned/operated
> 
> we did that before CT, and CT didn't actually see any value in what we were 
> doing... funny how they changed their story :( sad, but funny.
> 
>> backbones (no deep-packet stuff as far as I know) and selling security
>> services based on the intelligence they gather that way.
> 
> I don't believe they actually have a 'product' yet (not a sellable one) 
> though they do have:
> 
> <http://www.verizonbusiness.com/us/products/security/console/index.xml>?
> 
> (note that it will re-size your browser and display some dumb 'legal' 
> warning...) This info is pulled together by a group of 2 folks (the writeups) 
> based on information gathered in:
> 
> 1) netflow data
> 2) darknet traffic
> 3) nepenthes traps
> 
> a decent bit of stuff, though still vzb can't figure out how to make a 
> product out of it :( oh well.
> 
>> 
>> An argument could be made that actively blocking/combating botnets would
>> actually cut into their bottom line because they would lose out on
>> valuable intelligence.
>> 
> 
> eh.. maybe :) I don't think the problem was the intel 'business' being cut 
> into so much as the hundreds of millions required (and not reimbursed from 
> customer fee increases) to upgrade gear/network to deal with it on the 
> consumer side of the house... economics, no reason to let that get into our 
> reality is there?
>
>>         -Daniel
>> 
>> 
>> On Thu, 27 Mar 2008, Sean Donelan wrote:
>> 
>>> ----------- nsp-security-discuss Confidential --------
>>> 
>>> 
>>> Richard Lynch, CTO Verizon, spoke at the Tech Policy conference today
>>> in Hollywood.  I'm just picking out the one slightly relevant thing
>>> to what nsp-sec works on.
>>> 
>>> 
>>> http://www.capitolvalley.net/2008/03/richard-lynch-verizon.html
>>> In response to a question about the role of ISPs in combatting botnets, he
>>> replied that it's a matter of network control and management. They aren't
>>> doing alot and letting the end links to protect themselves.
>>> 
>>> He also noted that the only thing that Verizon blocks at the network level
>>> is Child Pornography. No complaints here.
>>> _______________________________________________
>>> nsp-security-discuss mailing list
>>> nsp-security-discuss at puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/nsp-security-discuss
>>> 
>>> Please do not Forward, CC, or BCC this E-mail outside of the 
>>> nsp-security-discuss community. Confidentiality is essential for effective 
>>> Internet security counter-measures.
>>> _______________________________________________
>>> 
>> _______________________________________________
>> nsp-security-discuss mailing list
>> nsp-security-discuss at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/nsp-security-discuss
>> 
>> Please do not Forward, CC, or BCC this E-mail outside of the 
>> nsp-security-discuss community. Confidentiality is essential for effective 
>> Internet security counter-measures.
>> _______________________________________________
>> 
>