[Eril-l] APS IP Block solutions?

[Dominic Benson]

Shibboleth will help in one respect as the block will apply to the user's IP address ,rather than that of your EZproxy service. However, breaches may still occur if the credentials have been shared, stolen or cracked.

Kind regards,
Dom Benson
E-resources Librarian | T +44(0)1895 266143
________________________________
From: Eril-l [eril-l-bounces at lists.eril-l.org] on behalf of Deziel, Bryan G. [bdeziel at anl.gov]
Sent: 16 December 2016 16:40
To: Susan Wiegand; Alice Daugherty
Cc: eril-l at lists.eril-l.org
Subject: Re: [Eril-l] APS IP Block solutions?

This is interesting as I was just having a discussion with someone about the need to move away from IP authentication.  We have begun experimenting with leveraging Shibboleth for certain resources such as IEEE Xplore.

-Bryan


Bryan G. Deziel, MLIS
Discovery and Digital Resources Librarian
Argonne Research Library,
Argonne National Laboratory
bdeziel at anl.gov<mailto:bdeziel at anl.gov>
(630) 252-3876

[Description: Description: Please consider the environment before printing]



From: Eril-l [mailto:eril-l-bounces at lists.eril-l.org] On Behalf Of Susan Wiegand
Sent: Friday, December 16, 2016 10:35 AM
To: Alice Daugherty <adaugher at lsu.edu>
Cc: eril-l at lists.eril-l.org
Subject: Re: [Eril-l] APS IP Block solutions?

I think NISO is working on something to improve security: "It is about time that libraries and publishers move beyond IP-based authentication. A related effort begun within the STM Association<http://r20.rs6.net/tn.jsp?f=001s1yuqKmHYZmwyvy5fqlYSlpD929PdlIp67jjNN4MT-SVpFE7mT2gl1ZlK0qdTJps1LL1rbSh8PZ2oUjR1EAw1gHqXeSuWbp8hXGSzBIoxy3RKlsbyNyds1ZRN9W6YCVAT1L5VzAgRxdD0xZGLOaxHnge7ASImV4dzmqSDrY91PEMGZImylE2xpY9c7l-e4Cb94e00MzjLmP0dJBk_oxTHhTvq0lnvsSxVUTjuZ46KqQtVSY1QqORD0XgLxTjpNbz&c=oL64PbSI-vm44PdFZnc_3EHQzoU7JjXtPnpJC4zMNMYsApwrO7Ut7g==&ch=6bA6JPJmQEWdb4pTEml00-eGyjCsGXS1LZdxmp2UOMUNMfJTQCvhhA==> of publishers earlier this year is gaining momentum, and NISO has been engaged in these conversations and is supporting the initiative." (from their Dec. newsletter: http://www.niso.org/publications/newsline/2016/newslinedecember2016.html. There's a survey to gain insight into issues and experiences, etc.
Should be an interesting coming discussion. What do others think about moving beyond IP?
Sue

Sue Wiegand
Periodicals Librarian
123 Cushwa-Leighton Library
Saint Mary's College
Notre Dame, IN 46556
574.284.4789

On Fri, Dec 16, 2016 at 11:04 AM, Alice Daugherty <adaugher at lsu.edu<mailto:adaugher at lsu.edu>> wrote:
Hello all,

In the past we have had the occasional IP block from ACS with the IP unfortunately being our EZProxy IP.  Lately, this has been a recurring issue, and not always the same user.

Recently, one person brought their computer to our IT people and no viruses were found.  We were thinking that a keystroke virus might have been the culprit.  Currently, a different user is causing our IP block and has caused the last 3 blocks.

This year, it seems that the excessive downloads block has occurred more frequently and with other vendors as well.

I wondered how other campuses are handing this issue?  How many attempts at password changes do you provide users before you consider taking away their access?  Do you ever consider restricting their access?  Are there other technologies that can be put in place to prevent these types of breaches?

Thank you,
Alice


[LSU]<http://www.lsu.edu/>
Alice Daugherty
Collection Assessment and Analysis Librarian
LSU Libraries
Louisiana State University
30 Middleton, Baton Rouge, LA  70803
office 225-578-7652
adaugher at lsu.edu<mailto:adaugher at lsu.edu> | lsu.edu<http://www.lsu.edu/> | lib.lsu.edu<http://lib.lsu.edu/>
[Facebook]<http://www.facebook.com/LSULibraries>  [Twitter] <http://www.twitter.com/lsulibraries>   [Instagram] <http://www.instagram.com/lsulibraries>


_______________________________________________
Eril-l mailing list
Eril-l at lists.eril-l.org<mailto:Eril-l at lists.eril-l.org>
http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161217/111f66f0/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.gif
Type: image/gif
Size: 566 bytes
Desc: image005.gif
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161217/111f66f0/attachment-0001.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image006.png
Type: image/png
Size: 334 bytes
Desc: image006.png
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161217/111f66f0/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image007.png
Type: image/png
Size: 205 bytes
Desc: image007.png
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161217/111f66f0/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image008.png
Type: image/png
Size: 333 bytes
Desc: image008.png
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161217/111f66f0/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image009.png
Type: image/png
Size: 291 bytes
Desc: image009.png
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161217/111f66f0/attachment-0007.png>