Voluntary code of conduct puts onus on service providers.
The Internet Industry Association (IIA) has
drafted a new code of conduct that suggests Internet Service Providers (ISPs) contact, and in some cases disconnect, customers that have malware-infected computers.
The drafted code, which will not be mandatory, suggested ISPs take a four-step approach to protecting customers.
- Identification of compromised computers
- Contact affected customer
- Provision of information and advice to fix the compromised system; and
- A reporting function for alerting about serious scale threats, such as those, that may threaten national security.
"Once an ISP has detected a compromised computer or malicious activity on its network, it should take action to address the problem. ISPs should therefore attempt to identify the end user whose computer has been compromised, and contact them to educate them about the problem," the new code states.
