[Eril-l] APS IP Block solutions?

[Melissa Belvadi]

Is your issue with APS (as in your subject line) or ACS (as in your first
sentence)? It makes a difference because ACS, in the form of SciFinder, has
an unusual dual authentication system that has caused us much confusion
when they report breaches to us.  Apparently a hacker can use a SciFinder
account created at one institution but through the hacked credentials of a
different SciFinder institution's proxy server.

More generally, our systems librarian has found at least one instance of
one of our own patrons (don't know if student or faculty) who apparently
quite deliberately shared their login credentials on an open site as a
political act, presumably of protest about paywalls.  We're having an
internal discussion right now as to whether we should handle such a
situation differently from the ones where we have no reason to suspect the
breached-account user wasn't just a victim, maybe one who chose too weak a
password. In the latter case, we force a password reset and let them have
access again right after that.

Melissa


On Fri, Dec 16, 2016 at 12:04 PM, Alice Daugherty <adaugher at lsu.edu> wrote:

> Hello all,
>
>
>
> In the past we have had the occasional IP block from ACS with the IP
> unfortunately being our EZProxy IP.  Lately, this has been a recurring
> issue, and not always the same user.
>
>
>
> Recently, one person brought their computer to our IT people and no
> viruses were found.  We were thinking that a keystroke virus might have
> been the culprit.  Currently, a different user is causing our IP block and
> has caused the last 3 blocks.
>
>
>
> This year, it seems that the excessive downloads block has occurred more
> frequently and with other vendors as well.
>
>
>
> I wondered how other campuses are handing this issue?  How many attempts
> at password changes do you provide users before you consider taking away
> their access?  Do you ever consider restricting their access?  Are there
> other technologies that can be put in place to prevent these types of
> breaches?
>
>
>
> Thank you,
>
> Alice
>
>
>
>
>
> *[image: LSU]* <http://www.lsu.edu/>
>
> *Alice Daugherty*
> Collection Assessment and Analysis Librarian
> LSU Libraries
> Louisiana State University
> 30 Middleton, Baton Rouge, LA  70803
> office 225-578-7652 <(225)%20578-7652>
> *adaugher at lsu.edu* <adaugher at lsu.edu> | *lsu.edu* <http://www.lsu.edu/> |
> *lib.lsu.edu* <http://lib.lsu.edu/>
>
> *[image: Facebook]* <http://www.facebook.com/LSULibraries>  *[image:
> Twitter]* <http://www.twitter.com/lsulibraries>  *[image: Instagram]*
> <http://www.instagram.com/lsulibraries>
>
>
>
> _______________________________________________
> Eril-l mailing list
> Eril-l at lists.eril-l.org
> http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org
>
>


-- 
Melissa Belvadi
Collections Librarian
University of Prince Edward Island
mbelvadi at upei.ca 902-566-0581
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161216/4edc6abf/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 334 bytes
Desc: not available
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161216/4edc6abf/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 291 bytes
Desc: not available
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161216/4edc6abf/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 333 bytes
Desc: not available
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161216/4edc6abf/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 205 bytes
Desc: not available
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161216/4edc6abf/attachment-0007.png>