Internet service providers are under increasing pressure to provide ‘clean pipes’ – to detect botnets and advanced threats present in their networks, alert or protect their customers, and ultimately provide assistance or advice to their customers on how to remediate the infection.
With the rapid proliferation of smart phones and other mobile internet computing devices, telco/mobile/wireless providers now face the same issue, with the additional and potential painful ramifications that malware infections on subscriber devices could result in fraudulent charges appearing on subscriber bills, which will result in a nightmare scenario for their customer service operations.
While there are a variety of technologies designed to help corporations detect, mitigate and remediate botnets and other unauthorized remote control activities within an enterprise network, many of these same technologies are inappropriate for use within Internet service providers, telecom provider networks (wireless and landline), cable and satellite providers, and Internet backbone provider networks.
This paper discusses the unique challenges Communication Service Providers (CSPs) face in protecting their networks and customers from advanced malware and botnet threats, and outlines best practices being adopted by leading CSP’s to detect infected computing devices and alternative mechanisms being used to alert the infected customer.