[Eril-l] Important new EZproxy security feature calls out to PSI’s blocklist for validation

[Debbie Wilton]

We are delighted to announce that OCLC is using PSI’s IP Intrusion Service block list to provide a new security feature for their latest release. EZproxy 6.5<https://www.oclc.org/en/news/announcements/2019/ezproxy-65.html> contains an important feature that incorporates a real-time call out to a security API that validates the IP address of the requester and logs/denies access if the IP address is a known pirate/hacker. This greatly reduces the time-consuming and manual process of scanning log files for hacked credentials. The API calls out to a blocklist created by IP-intrusion.org<http://IP-intrusion.org> and validated via theIPregistry.org<http://theIPregistry.org> giving libraries the power to ensure that their verified IP addresses are never included on the list. TheIPregistry.org<http://TheIPregistry.org> is a repository that contains over 1.5 billion verified IP addresses from 60,000 content licensing organizations worldwide. Both IP-intrusion.org and theIPregistry.org are maintained by PSI Ltd.


The IPs on the list have been identified as the source of spamming, phishing, hacking, and other forms of cyber-crime. The list also incorporates the information identified on the P.R. Butler list. One major advantage of this block list is that it uses theIPregistry.org as a whitelist, giving libraries the power to ensure that their verified IP addresses are not included on the list. Keeping the IP addresses held within theIPregistry.org for your organisation up-to-date will ensure that these IPs are never included on the block list. We urge all libraries that haven’t already done so to register a user and confirm the IPs held for their organisation.


PSI<https://www.publishersolutionsint.com/> is an independent third-party organization, which enables libraries, publishers and membership societies to work together securely and confidentially towards the common goals of facilitating legitimate access to scholarly content, eradicating IP misuse, eliminating subscription abuse, and combating cybercrime.

OCLC<https://www.oclc.org/en/home.html> is a non-profit global library cooperative providing shared technology services, original research and community programs so that libraries can better fuel learning, research and innovation.

***Apologies for cross-postings***

Debbie Wilton
Marketing Manager and Library Liaison
PSI Ltd

Please follow us on Twitter:
https://twitter.com/ip_registry
https://twitter.com/PubSolutionsInt


______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com
______________________________________________________________________
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20190225/cc3b639d/attachment.html>