People-driven security, an approach that pools the judgments of individual participants to identify new threats, is gathering
momentum, with uses popping up in everything from antimalware and spam blocking to site filtering (Compare antispam products).
OpenDNS's Domain Tagging, introduced in February, is the latest example of this kind of strength in numbers. The free Web-filtering
service allows subscribers to block sites in their choice of categories. But instead of one company deciding whether a site is malicious, pornographic, or otherwise unsavory, anyone who volunteers
can help do the filtering.
Download the latest Network World Executive Guide - NAC: Critical to the Security of your Network
Illustrating the trend's extent, Google created a page last fall where anyone can submit a site that they believe to be malicious. Once Google verifies a submission, it adds the tainted site to a shared blacklist. Other free and paid services for tracking
attacks, identifying malware, and blocking spam are also tapping such people power.
Us vs. Them
The movement is achieving critical mass just in time, potentially overcoming one problem with such free exchange of information:
At sites such as VirusTotal (where people can scan files believed to be malicious and share new finds), wrongdoers can use the information too.
"The good guys need to out-share the bad guys to help counter them," says Johannes Ullrich, chief research officer at the
Internet Storm Center (ISC). The center's free D-Shield service analyzes data from people's firewalls to track breach attempts.
With a thousand firewalls being tracked, the center can then identify an at-risk machine and alert its owner.
OpenDNS's PhishTank, launched in 2006, identifies phishing sites based on user submissions and community analysis. As a result, flagged sites
are blocked for people who use OpenDNS for domain-name lookups. The Domain Tagging service, which expands on the idea behind
PhishTank, permits any person who signs up to submit a site to a category, such as social networking. Other users then vote
on that submission, and if enough people okay it, the site joins the domain-tagging lists. To help prevent incorrect categorizations
or attempts by crooks to game the system, votes from trusted users have more weight than do those from people whose submissions
have been voted down.
For more PC news, visit PC World. Story copyright PC World Communications, Inc.
