Library Technology Guides

Current News Service and Archive

Press Release: PSI [February 25, 2019]

Important new EZproxy security feature calls out to PSI's blocklist for validation

25th February 2019. We are delighted to announce that OCLC is using PSI's IP Intrusion Service block list to provide a new security feature for their latest release. EZproxy 6.5 contains an important feature that incorporates a real-time call out to a security API that validates the IP address of the requester and logs/denies access if the IP address is a known pirate/hacker. This greatly reduces the time-consuming and manual process of scanning log files for hacked credentials. The API calls out to a blocklist created by IP-intrusion.org and validated via theIPregistry.org. TheIPregistry.org is a repository that contains over 1.5 billion verified IP addresses from 60,000 content licensing organizations worldwide. Both IP-intrusion.org and theIPregistry.org are maintained by PSI Ltd.

The IPs on the list have been identified as the source of spamming, phishing, hacking, and other forms of cyber-crime. The list also incorporates the information identified on the P.R. Butler list. One major advantage of this blocklist is that it uses theIPregistry.org as a whitelist, giving libraries the power to ensure that their verified IP addresses are not included on the list. Keeping the IP addresses held within theIPregistry.org for your organisation up-to-date will ensure that these IPs are never included on the block list. We urge all libraries that haven't already done so to register a user and confirm the IPs held for their organisation.

PSI is an independent third-party organization, which enables libraries, publishers and membership societies to work together securely and confidentially towards the common goals of facilitating legitimate access to scholarly content, eradicating IP misuse, eliminating subscription abuse, and combating cyber-crime.

OCLC is a non-profit global library cooperative providing shared technology services, original research and community programs so that libraries can better fuel learning, research and innovation.


Summary: PSI announced that OCLC is using PSI's IP Intrusion Service block list to provide a new security feature for their latest release. EZproxy 6.5 contains an important feature that incorporates a real-time call out to a security API that validates the IP address of the requester and logs/denies access if the IP address is a known pirate/hacker. This greatly reduces the time-consuming and manual process of scanning log files for hacked credentials. The API calls out to a blocklist created by IP-intrusion.org and validated via theIPregistry.org. TheIPregistry.org is a repository that contains over 1.5 billion verified IP addresses from 60,000 content licensing organizations worldwide. Both IP-intrusion.org and theIPregistry.org are maintained by PSI Ltd.
Publication Year:2019
Type of Material:Press Release
LanguageEnglish
Date Issued:February 25, 2019
Publisher:PSI
Company:
Company: PSI
OCLC
Products: EZproxy
Permalink: https://librarytechnology.org/pr/25087/important-new-ezproxy-security-feature-calls-out-to-psis-blocklist-for-validation

DocumentID: 25087 views: 94 Created: 2020-04-23 14:48:43 Last Modified: 2023-09-10 04:00:09.