<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style>
<!--
@font-face
{font-family:Helvetica}
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
@font-face
{font-family:"Palatino Linotype"}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
p.msonormal0, li.msonormal0, div.msonormal0
{margin-right:0in;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif}
span.EmailStyle19
{font-family:"Calibri",sans-serif;
color:#1F497D}
.MsoChpDefault
{font-family:"Calibri",sans-serif}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
-->
</style><style type="text/css" id="owaParaStyle">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body fpstyle="1" ocsi="0" vlink="purple" link="blue" lang="EN-US">
<div style="direction: ltr;font-family: Arial;color: #000000;font-size: 12pt;">Shibboleth will help in one respect as the block will apply to the user's IP address ,rather than that of your EZproxy service. However, breaches may still occur if the credentials
have been shared, stolen or cracked.<br>
<div>
<div style="font-family:Tahoma; font-size:13px">
<div style="font-family:Tahoma; font-size:13px"><font size="3" face="Arial"><br>
Kind regards,<br>
</font>
<p class="MsoNormal" style="text-autospace:none"><font size="3" face="Arial"><b><span style="color:rgb(190,15,52)">Dom Benson</span></b><span style="color:rgb(190,15,52)"></span></font></p>
<font size="3" face="Arial"></font>
<p class="MsoNormal" style="text-autospace:none"><font size="3" face="Arial"><span style="color:rgb(0,50,91)">E-resources Librarian
</span><span style="color:rgb(190,15,52)">|</span><span style="color:rgb(0,50,91)">
</span><span style="color:rgb(190,15,52)">T</span><span style="color:rgb(31,73,125)">
</span><span style="color:rgb(0,50,91)">+44(0)1895 266143</span></font></p>
</div>
</div>
</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">
<hr tabindex="-1">
<div id="divRpF763761" style="direction: ltr;"><font size="2" color="#000000" face="Tahoma"><b>From:</b> Eril-l [eril-l-bounces@lists.eril-l.org] on behalf of Deziel, Bryan G. [bdeziel@anl.gov]<br>
<b>Sent:</b> 16 December 2016 16:40<br>
<b>To:</b> Susan Wiegand; Alice Daugherty<br>
<b>Cc:</b> eril-l@lists.eril-l.org<br>
<b>Subject:</b> Re: [Eril-l] APS IP Block solutions?<br>
</font><br>
</div>
<div></div>
<div>
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D">This is interesting as I was just having a discussion with someone about the need to move away from IP authentication. We have begun experimenting with leveraging
Shibboleth for certain resources such as IEEE Xplore.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D">-Bryan</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Palatino Linotype",serif; color:gray">Bryan G. Deziel, MLIS</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Palatino Linotype",serif; color:gray">Discovery and Digital Resources Librarian</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Palatino Linotype",serif; color:gray">Argonne Research Library,</span></p>
<p class="MsoNormal"><b><i><span style="font-size:10.0pt; font-family:"Palatino Linotype",serif; color:gray">Argonne National Laboratory</span></i></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Palatino Linotype",serif; color:gray"><a href="mailto:bdeziel@anl.gov" target="_blank"><span style="color:gray">bdeziel@anl.gov</span></a></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Palatino Linotype",serif; color:gray">(630) 252-3876</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Palatino Linotype",serif; color:gray"> </span></p>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif; color:#00B050"><img id="Picture_x0020_3" src="cid:image005.gif@01D25788.C85506F0" alt="Description: Description: Please consider the environment before printing" style="width:4.0833in; height:.1979in" width="392" border="0" height="19"></span><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D"></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D"> </span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt; font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt; font-family:"Calibri",sans-serif"> Eril-l [mailto:eril-l-bounces@lists.eril-l.org]
<b>On Behalf Of </b>Susan Wiegand<br>
<b>Sent:</b> Friday, December 16, 2016 10:35 AM<br>
<b>To:</b> Alice Daugherty <adaugher@lsu.edu><br>
<b>Cc:</b> eril-l@lists.eril-l.org<br>
<b>Subject:</b> Re: [Eril-l] APS IP Block solutions?</span></p>
<p class="MsoNormal"> </p>
<div>
<div>
<p class="MsoNormal">I think NISO is working on something to improve security: "<span style="font-size:11.0pt; font-family:"Arial",sans-serif">It is about time that libraries and publishers move beyond IP-based authentication. A related
<a href="http://r20.rs6.net/tn.jsp?f=001s1yuqKmHYZmwyvy5fqlYSlpD929PdlIp67jjNN4MT-SVpFE7mT2gl1ZlK0qdTJps1LL1rbSh8PZ2oUjR1EAw1gHqXeSuWbp8hXGSzBIoxy3RKlsbyNyds1ZRN9W6YCVAT1L5VzAgRxdD0xZGLOaxHnge7ASImV4dzmqSDrY91PEMGZImylE2xpY9c7l-e4Cb94e00MzjLmP0dJBk_oxTHhTvq0lnvsSxVUTjuZ46KqQtVSY1QqORD0XgLxTjpNbz&c=oL64PbSI-vm44PdFZnc_3EHQzoU7JjXtPnpJC4zMNMYsApwrO7Ut7g==&ch=6bA6JPJmQEWdb4pTEml00-eGyjCsGXS1LZdxmp2UOMUNMfJTQCvhhA==" target="_blank">
<span style="color:black">effort begun within the STM Association</span></a> of publishers earlier this year is gaining momentum, and
<span class="m-5928034165579592725gmail-il">NISO</span> has been engaged in these conversations and is supporting the initiative." (from their Dec. newsletter:
<a href="http://www.niso.org/publications/newsline/2016/newslinedecember2016.html" target="_blank">
http://www.niso.org/publications/newsline/2016/newslinedecember2016.html</a>. There's a survey to gain insight into issues and experiences, etc.
<br>
Should be an interesting coming discussion. What do others think about moving beyond IP?
</span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Arial",sans-serif">Sue</span></p>
</div>
</div>
<div>
<p class="MsoNormal"><br clear="all">
</p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:13.5pt">Sue Wiegand</span></p>
</div>
<p class="MsoNormal"><span style="font-size:13.5pt">Periodicals Librarian</span></p>
</div>
<p class="MsoNormal"><span style="font-size:13.5pt">123 Cushwa-Leighton Library</span></p>
</div>
<p class="MsoNormal"><span style="font-size:13.5pt">Saint Mary's College</span></p>
</div>
<p class="MsoNormal"><span style="font-size:13.5pt">Notre Dame, IN 46556<br>
574.284.4789 </span></p>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"> </p>
<div>
<p class="MsoNormal">On Fri, Dec 16, 2016 at 11:04 AM, Alice Daugherty <<a href="mailto:adaugher@lsu.edu" target="_blank">adaugher@lsu.edu</a>> wrote:</p>
<blockquote style="border:none; border-left:solid #CCCCCC 1.0pt; padding:0in 0in 0in 6.0pt; margin-left:4.8pt; margin-right:0in">
<div>
<div>
<p class="MsoNormal" style="">Hello all, </p>
<p class="MsoNormal" style=""> </p>
<p class="MsoNormal" style="">In the past we have had the occasional IP block from ACS with the IP unfortunately being our EZProxy IP. Lately, this has been a recurring issue, and not always the same user.
</p>
<p class="MsoNormal" style=""> </p>
<p class="MsoNormal" style="">Recently, one person brought their computer to our IT people and no viruses were found. We were thinking that a keystroke virus might have been the culprit. Currently, a different user is causing our IP block and has caused the
last 3 blocks.</p>
<p class="MsoNormal" style=""> </p>
<p class="MsoNormal" style="">This year, it seems that the excessive downloads block has occurred more frequently and with other vendors as well.</p>
<p class="MsoNormal" style=""> </p>
<p class="MsoNormal" style="">I wondered how other campuses are handing this issue? How many attempts at password changes do you provide users before you consider taking away their access? Do you ever consider restricting their access? Are there other technologies
that can be put in place to prevent these types of breaches?</p>
<p class="MsoNormal" style=""> </p>
<p class="MsoNormal" style="">Thank you, </p>
<p class="MsoNormal" style="">Alice</p>
<p class="MsoNormal" style=""> </p>
<p class="MsoNormal" style=""> </p>
<p class="MsoNormal" style="margin-bottom:7.5pt; line-height:15.0pt"><a href="http://www.lsu.edu/" target="_blank"><b><span style="font-size:10.5pt; font-family:"Helvetica",sans-serif; color:#664499; text-decoration:none"><img id="m_5596734869734164009Picture_x0020_1" src="cid:image006.png@01D25788.C85506F0" alt="LSU" style="width:.5625in; height:.177in" width="54" border="0" height="17"></span></b></a></p>
<p class="MsoNormal" style="margin-bottom:7.5pt; line-height:15.0pt"><b><span style="font-size:10.5pt; font-family:"Helvetica",sans-serif; color:#333333">Alice Daugherty</span></b><span style="font-size:10.5pt; font-family:"Helvetica",sans-serif; color:#333333"><br>
Collection Assessment and Analysis Librarian<br>
LSU Libraries<br>
Louisiana State University <br>
30 Middleton, Baton Rouge, LA 70803 <br>
office 225-578-7652 <br>
<a href="mailto:adaugher@lsu.edu" target="_blank"><b><span style="color:#451D7C">adaugher@lsu.edu</span></b></a> | <a href="http://www.lsu.edu/" target="_blank"><b><span style="color:#451D7C">lsu.edu</span></b></a> | <a href="http://lib.lsu.edu/" target="_blank"><b><span style="color:#451D7C">lib.lsu.edu</span></b></a></span></p>
<p class="MsoNormal" style="margin-bottom:7.5pt; line-height:15.0pt"><a href="http://www.facebook.com/LSULibraries" target="_blank"><b><span style="font-size:10.5pt; font-family:"Helvetica",sans-serif; color:#664499; text-decoration:none"><img id="m_5596734869734164009Picture_x0020_2" src="cid:image007.png@01D25788.C85506F0" alt="Facebook" style="width:.177in; height:.177in" width="17" border="0" height="17"></span></b></a><span style="font-size:10.5pt; font-family:"Helvetica",sans-serif; color:#333333"> </span><a href="http://www.twitter.com/lsulibraries" target="_blank"><b><span style="font-size:10.5pt; font-family:"Helvetica",sans-serif; color:#664499; text-decoration:none"><img id="m_5596734869734164009Picture_x0020_3" src="cid:image008.png@01D25788.C85506F0" alt="Twitter" style="width:.2187in; height:.177in" width="21" border="0" height="17"></span></b></a><span style="font-size:10.5pt; font-family:"Helvetica",sans-serif; color:#333333"> </span><a href="http://www.instagram.com/lsulibraries" target="_blank"><b><span style="font-size:10.5pt; font-family:"Helvetica",sans-serif; color:#664499; text-decoration:none"><img id="m_5596734869734164009Picture_x0020_4" src="cid:image009.png@01D25788.C85506F0" alt="Instagram" style="width:.177in; height:.177in" width="17" border="0" height="17"></span></b></a><span style="font-size:10.5pt; font-family:"Helvetica",sans-serif; color:#333333"> </span></p>
<p class="MsoNormal" style=""> </p>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
_______________________________________________<br>
Eril-l mailing list<br>
<a href="mailto:Eril-l@lists.eril-l.org" target="_blank">Eril-l@lists.eril-l.org</a><br>
<a href="http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org" target="_blank">http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org</a></p>
</blockquote>
</div>
<p class="MsoNormal"> </p>
</div>
</div>
</div>
</div>
</div>
</body>
</html>