[Eril-l] ACS IP Block solutions?

[Alice Daugherty]

Melissa and all,

I meant ACS. Mea Culpa.

Alice

From: Melissa Belvadi [mailto:mbelvadi at upei.ca]
Sent: Friday, December 16, 2016 10:17 AM
To: Alice Daugherty <adaugher at lsu.edu>
Cc: eril-l at lists.eril-l.org
Subject: Re: [Eril-l] APS IP Block solutions?

Is your issue with APS (as in your subject line) or ACS (as in your first sentence)? It makes a difference because ACS, in the form of SciFinder, has an unusual dual authentication system that has caused us much confusion when they report breaches to us.  Apparently a hacker can use a SciFinder account created at one institution but through the hacked credentials of a different SciFinder institution's proxy server.

More generally, our systems librarian has found at least one instance of one of our own patrons (don't know if student or faculty) who apparently quite deliberately shared their login credentials on an open site as a political act, presumably of protest about paywalls.  We're having an internal discussion right now as to whether we should handle such a situation differently from the ones where we have no reason to suspect the breached-account user wasn't just a victim, maybe one who chose too weak a password. In the latter case, we force a password reset and let them have access again right after that.

Melissa


On Fri, Dec 16, 2016 at 12:04 PM, Alice Daugherty <adaugher at lsu.edu<mailto:adaugher at lsu.edu>> wrote:
Hello all,

In the past we have had the occasional IP block from ACS with the IP unfortunately being our EZProxy IP.  Lately, this has been a recurring issue, and not always the same user.

Recently, one person brought their computer to our IT people and no viruses were found.  We were thinking that a keystroke virus might have been the culprit.  Currently, a different user is causing our IP block and has caused the last 3 blocks.

This year, it seems that the excessive downloads block has occurred more frequently and with other vendors as well.

I wondered how other campuses are handing this issue?  How many attempts at password changes do you provide users before you consider taking away their access?  Do you ever consider restricting their access?  Are there other technologies that can be put in place to prevent these types of breaches?

Thank you,
Alice


[LSU]<http://www.lsu.edu/>
Alice Daugherty
Collection Assessment and Analysis Librarian
LSU Libraries
Louisiana State University
30 Middleton, Baton Rouge, LA  70803
office 225-578-7652<tel:(225)%20578-7652>
adaugher at lsu.edu<mailto:adaugher at lsu.edu> | lsu.edu<http://www.lsu.edu/> | lib.lsu.edu<http://lib.lsu.edu/>
[Facebook]<http://www.facebook.com/LSULibraries>  [Twitter] <http://www.twitter.com/lsulibraries>   [Instagram] <http://www.instagram.com/lsulibraries>


_______________________________________________
Eril-l mailing list
Eril-l at lists.eril-l.org<mailto:Eril-l at lists.eril-l.org>
http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org



--
Melissa Belvadi
Collections Librarian
University of Prince Edward Island
mbelvadi at upei.ca<mailto:mbelvadi at upei.ca> 902-566-0581


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161216/234a7029/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 334 bytes
Desc: image001.png
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161216/234a7029/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 205 bytes
Desc: image002.png
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161216/234a7029/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 333 bytes
Desc: image003.png
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161216/234a7029/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 291 bytes
Desc: image004.png
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161216/234a7029/attachment-0003.png>