Survey on the use of IP blacklists for threat mitigation

Mailman List Mirror (Read Only)
1

Hi NANOG community,

We are a group of researchers studying the use of IP blacklists as a mechanism to mitigate security threats – particularly over the IPv6 Internet. We would like to understand if and how you use IP blacklists to secure your networks. Please consider taking our short survey: https://forms.gle/ZEsxyiBivJAfLF7e6

The survey will be anonymous unless you choose to identify yourself.

Thanks,
Rachee
UMass Amherst

2

Would you be interested in input from security professionals or are you targeting network engineers directly with this?

3

We would very much appreciate input from security professionals.

PS: as someone correctly pointed out, the more appropriate terminology is “IP blocklists”. I apologize for the mistake and I have fixed it in the google survey.

Thanks,
Rachee

4

In kind, I’d like to encourage the use of terms like permit/accept list or deny/block list.

Respectfully,
-Ryan

5

Yo Rachee!

6

Guess we all better start rewriting all of the documentation out there because some PC marketing snowflake wants to get extra brownie points and attention for classifying a color in RGB into a racial divide for which it never originated.

blacklists are not always deny/block/disallow and conformed of things that allow you to take actions whatever your choosing upon their contents and your policies.

What’s next ? redlisting ? Don’t offend the Russians … blue ? Don’t want to offend the police …

Leave this crap off the list, it’s not helping anyone.

SMH

7

How about - don’t use colour at all, since it’s just a culture-specific proxy for the actual meaning? “blacklist” and “whitelist” are challenging for ESL and for people from other cultures. Block list, allow list, filter list, etc. are all more precise terms that happen to be easier for everyone to understand.

Improving technical jargon is always worthwhile.

8

J. Hellenthal, thank you for your reply.

I am not in marketing. I represent a team of talented network engineers, some of which are persons of color and under-represented minorities. I believe we, as a community, can do better to effect change, and hold each other accountable to this end. It is a worthy discussion for NANOG to have, particularly as an industry that has struggled in the areas of diversity and inclusion.

This may be a great starting point for you on your journey:

https://www.nanog.org/stories/our-commitment-diversity-and-inclusion/
https://www.nanog.org/about/code-conduct/

To the OP - I express my appreciation for acknowledging and adjusting the language used in your survey.

Regards,

  • Ryan
    (past NANOG Program Committee Member)
9

If we want to go down that rabbit trail, then aren’t we talking about Reputation lists?

10