|
 |
myNetWatchman Privacy Policy
Since we provide Internet security services we are particularly
concerned about protecting your privacy. The following details
our policy regarding each of the types of information you
might provide.
Registration Information
- Name, address, e-mail address, phone numbers.
This information is kept completely private it
is NOT used in any of the publicly visible reports. Also
we do NOT sell address information to direct marketers (I
despise SPAM and junk mail as much as the next person).
The only reason I even ask for address information is in
the event I should ever need to mail you something (an autographed
copy of my book for instance, or maybe even something actually
interesting like a myNetWatchman t-shirt).
I'm obsessive about providing good customer support and
often call my users if I see abnormal attack activity and/or
see you having problems sending data. If you prefer to have
all communication via e-mail, then don't provide your full
phone number. I do like to have the area code and exchange
(the first 6 digits of your phone number), but only so that
I can correlate data to a specific telephone switching center
(AKA central office).
- City, state, country, zip code. This
information is used only for report summaries. For example,
to calculate the number of attacks targeted to a given city,
state, or country.
- Domain Name. This is simply the name
of your ISP. This is also used for report summaries.
- Alias Name. All publicly visible reports
that show your attack data refer only to your Alias Name
(AKA UserID). As long as you pick an alias name that is
not publicly known, no one will know the actual source of
the data. If you use an alias name in public newsgroups,
forums, chat rooms and have revealed your true identity
to others, you may want to consider choosing a different
alias name for myNetWatchman.
Attack Data
- Attack Date, Attacker IP, Destination Port, IP
Protocol, Attack Count. All information is made
public and included in escalations sent to the responsible
party
- Victim IP. Analyzing the pattern of
IP addresses that an attacker is targeting can be essential
for the forensic analysis of the attack. To balance the
need for privacy and the need for forensic evidence we have
chosen only to reveal the first two (2) octets of your IP
address in publicly accessible reports and escalation e-mails.
For example, if you report a Victim IP of 66.20.120.10 this
will appear on reports as 66.20.x.x. We feel that this approach
adequately protects your privacy (e.g. the reporting IP
address could be any one of almost 65,000 addresses) while
at the same time provide at least some information for forensic
analysis.
If you are logged in to the myNetWatchman server and are
looking at records of YOUR OWN incidents, myNetWatchman
displays your IP addresses in full. This is essential for
larger sites reporting events from entire IP subnets. However,
whenever others view events that are sourced from your IP
address, they will be presented with the masked IP, described
as above.
Law Enforcement Policy
In the rare cases, or in cases where attack sources are .gov
and .mil sites, we do escalate to the appropriate
government agency.
|