![Page 1: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/1.jpg)
NetReg – Virus Killer? Spam Stopper?
Copyright – 2006 This work is the intellectual property of the authors. Permission is granted for this material to be shared for non-commercial, educational purposes, provided that this copyright statement appears on the reproduced materials and notice is given that the copying is by permission of the authors. To disseminate otherwise or to republish requires written permission from the authors.
Matt Brzeski, David LoveEducause Midwest RegionalMarch 15, 2006
![Page 2: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/2.jpg)
NetReg
Virus Killer? Spam Stopper?
![Page 3: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/3.jpg)
Agenda What was the problem? What resources did we use? What benefits/lessons did we gain?
![Page 4: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/4.jpg)
Presenters Matt Brzeski
Student Computing Coordinator David Love
Programmer / Computer Support Technician
![Page 5: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/5.jpg)
Background Carthage
College Liberal arts 2200
enrollment Kenosha, WI
2/3 between Chicago and Milwaukee
![Page 6: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/6.jpg)
Environment Students own computers Residential halls
![Page 7: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/7.jpg)
Networking• Wired
– Each hall is subnet
– Not port-per-pillow
• Wireless– VLAN per hall– VLAN for rest of
campus
![Page 8: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/8.jpg)
Problem Students could not compute
I cannot “IM” my friends!!! What are these popups? My computer is slow-w-w-w
![Page 9: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/9.jpg)
Impact on campus One infected PC took a whole dorm offline Work to clean PCs
![Page 10: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/10.jpg)
Technical Goals Map MAC address to Novell username Verify acceptance of A.U.P. Enforce certain terms of A.U.P.
Windows XP Service Pack 2 Symantec Anti-virus Definitions < 30 days old
Prevent access if conditions are not met
![Page 11: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/11.jpg)
Solutions considered NetReg Nessus
![Page 12: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/12.jpg)
NetReg NetReg
www.netreg.org Used by St. Norbert’s, Amherst,
University of Vermont, Duke, et alii Validator (modified)
www.snc.edu/compserv/tech/sncvalidator/
Written by St. Norbert College
![Page 13: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/13.jpg)
How NetReg Works
![Page 14: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/14.jpg)
How the Validator Works Download and run the program Checks various registry keys
Confirm SP2 installation Confirm Symantec installation Retrieve virus definition date
Send information to server If matches conditions, set a cookie
(which NetReg will check for)
![Page 15: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/15.jpg)
Programming NetReg Server setup
Dual PII 400Mhz w/ 128 MB RAM SuSE LAMP stack (minus the M)
BIND + Dhcpd
Software NetReg Validator Cron job to fetch virus definitions
![Page 16: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/16.jpg)
Is It Secure? Do we care?
80 / 20 rule Most problems caused (as earlier
numbers show) by average Windows users Make everyone else (Mac, Linux, etc.)
register, but no equivalent validator If user is sophisticated enough to set
a static IP or fudge the URL, unlikely to be a problem
![Page 17: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/17.jpg)
What does it look like?
![Page 18: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/18.jpg)
Registration page
![Page 19: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/19.jpg)
Publicity E-mail notices Freshman orientation College newspaper
![Page 20: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/20.jpg)
(Perceived) Benefits
NetReg help instead of AntiVirus now shorter in duration keeps ‘problem’ PCs off network
AntiVirus Effort
0
50
100
150
2003 2004 2005
Inci
den
ts
$-
$2,000
$4,000
$6,000
$8,000
$10,000
Issues
Costs
![Page 21: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/21.jpg)
Lessons Learned ‘Old’ OSes remain AOL Browser ‘in the way’ Definitions kept current Spyware gets nasty
Rootkits Spam goes thru 3rd party
Login.postini.com
![Page 22: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/22.jpg)
Questions? [email protected] [email protected]
![Page 23: NetReg – Virus Killer? Spam Stopper? Copyright – 2006This work is the intellectual property of the authors. Permission is granted for this material to](https://reader038.vdocument.in/reader038/viewer/2022110400/56649dd35503460f94acb035/html5/thumbnails/23.jpg)
The End