Web filtering in schools

Last updated

Web filtering in schools blocks students from inappropriate and distracting content across the web, while allowing sites that are selected by school administrators. [1] Rather than simply blocking off large portions of the Internet, many schools utilize customizable web filtering systems that provide them with greater control over which sites are allowed and which are blocked. Schools will typically block social media websites, games, pornography, other distracting websites, websites that harm academic integrity, websites that bypass web filtering, etc.

Contents

By region

United States

The Children's Internet Protection Act (CIPA) requires that U.S. schools have appropriate measures in place to protect students from obscene or harmful online content in order to be eligible for discounts on internet access or internal connections through the Schools and Libraries Program of the Universal Service Fund, commonly known as the E-Rate program. [2] There are a number of commercially available free and paid services that allow schools to meet CIPA requirements and receive the discount.

Types

The FCC and CIPA do not specify how the filtering needs to be done, so most schools are using a combination of DNS, browser and firewall-based filtering.

DNS filtering

The DNS filtering happens at the domain resolution layer of the Internet and does not allow the IP address of an obscene or harmful website to be discovered. There are multiple paid products that perform such work, but many schools are leveraging free solutions to filter non-safe sites. [3]

Broad Filters

A large reason for certain sites being blocked is the filters and categorizes that are set in place to automatically block sites. However, one problem that arises with filters is a broad category, which can cause sites with no correlation. Many filters will block any site that has even the smallest correlation with the keywords or themes present in said filter and unfortunately, that can prevent students from using and accessing legitimate sites, whether for school, or personal use.

See also

Related Research Articles

An Internet filter is software that restricts or controls the content an Internet user is capable to access, especially when utilized to restrict material delivered over the Internet via the Web, Email, or other means. Such restrictions can be applied at various levels: a government can attempt to apply them nationwide, or they can, for example, be applied by an Internet service provider to its clients, by an employer to its personnel, by a school to its students, by a library to its visitors, by a parent to a child's computer, or by an individual user to their own computers. The motive is often to prevent access to content which the computer's owner(s) or other authorities may consider objectionable. When imposed without the consent of the user, content control can be characterised as a form of internet censorship. Some filter software includes time control functions that empowers parents to set the amount of time that child may spend accessing the Internet or playing games or other computer activities.

<span class="mw-page-title-main">Proxy server</span> Computer server that makes and receives requests on behalf of a user

In computer networking, a proxy server is a server application that acts as an intermediary between a client requesting a resource and the server providing that resource. It improves privacy, security, and possibly performance in the process.

Ad blocking or ad filtering is a software capability for blocking or altering online advertising in a web browser, an application or a network. This may be done using browser extensions or other methods.

<span class="mw-page-title-main">Children's Internet Protection Act</span> United States federal law

The Children's Internet Protection Act (CIPA) is one of a number of bills that the United States Congress proposed to limit children's exposure to pornography and explicit content online.

E-Rate is the commonly used name for the Schools and Libraries Program of the Universal Service Fund, which is administered by the Universal Service Administrative Company (USAC) under the direction of the Federal Communications Commission (FCC). The program provides discounts to assist schools and libraries in the United States to obtain affordable telecommunications and internet access. It is one of four support programs funded through a universal service fee charged to companies that provide interstate and/or international telecommunications services.

<span class="mw-page-title-main">OpenDNS</span> Domain name system provided by Cisco using closed-source software

OpenDNS is an American company providing Domain Name System (DNS) resolution services—with features such as phishing protection, optional content filtering, and DNS lookup in its DNS servers—and a cloud computing security product suite, Umbrella, designed to protect enterprise customers from malware, botnets, phishing, and targeted online attacks. The OpenDNS Global Network processes an estimated 100 billion DNS queries daily from 85 million users through 25 data centers worldwide.

<span class="mw-page-title-main">Internet censorship</span> Legal control of the internet

Internet censorship is the legal control or suppression of what can be accessed, published, or viewed on the Internet. Censorship is most often applied to specific internet domains but exceptionally may extend to all Internet resources located outside the jurisdiction of the censoring state. Internet censorship may also put restrictions on what information can be made internet accessible. Organizations providing internet access – such as schools and libraries – may choose to preclude access to material that they consider undesirable, offensive, age-inappropriate or even illegal, and regard this as ethical behavior rather than censorship. Individuals and organizations may engage in self-censorship of material they publish, for moral, religious, or business reasons, to conform to societal norms, political views, due to intimidation, or out of fear of legal or other consequences.

Internet censorship in the United States is the suppression of information published or viewed on the Internet in the United States. The First Amendment of the United States Constitution protects freedom of speech and expression against federal, state, and local government censorship.

DNS rebinding is a method of manipulating resolution of domain names that is commonly used as a form of computer attack. In this attack, a malicious web page causes visitors to run a client-side script that attacks machines elsewhere on the network. In theory, the same-origin policy prevents this from happening: client-side scripts are only allowed to access content on the same host that served the script. Comparing domain names is an essential part of enforcing this policy, so DNS rebinding circumvents this protection by abusing the Domain Name System (DNS).

<span class="mw-page-title-main">Block (Internet)</span> Restriction on accessing an online resource

On the Internet, a block or ban is a technical measure intended to restrict access to information or resources. Blocking and its inverse, unblocking, may be implemented by the owners of computers using software.

DNS hijacking, DNS poisoning, or DNS redirection is the practice of subverting the resolution of Domain Name System (DNS) queries. This can be achieved by malware that overrides a computer's TCP/IP configuration to point at a rogue DNS server under the control of an attacker, or through modifying the behaviour of a trusted DNS server so that it does not comply with internet standards.

<span class="mw-page-title-main">Blacklist (computing)</span> Criteria to control computer access

In computing, a blacklist, disallowlist, blocklist, or denylist is a basic access control mechanism that allows through all elements, except those explicitly mentioned. Those items on the list are denied access. The opposite is a whitelist, allowlist, or passlist, in which only items on the list are let through whatever gate is being used. A greylist contains items that are temporarily blocked until an additional step is performed.

United States v. American Library Association, 539 U.S. 194 (2003), was a decision in which the United States Supreme Court ruled that the United States Congress has the authority to require public schools and libraries receiving E-Rate discounts to install web filtering software as a condition of receiving federal funding. In a plurality opinion, the Supreme Court ruled that public school and library usage of Internet filtering software does not violate their patrons' First Amendment free speech rights and that the Children's Internet Protection Act is not unconstitutional.

Website correlation, or website matching, is a process used to identify websites that are similar or related. Websites are inherently easy to duplicate. This led to proliferation of identical websites or very similar websites for purposes ranging from translation to Internet marketing to Internet crime Locating similar websites is inherently problematic because they may be in different languages, on different servers, in different countries.

Internet censorship circumvention, also referred to as going over the wall or scientific browsing in China, is the use of various methods and tools to bypass internet censorship.

Domain Name System blocking, or DNS blocking / filtering, is a strategy for making it difficult for users to locate specific domains or websites on the Internet. It was first introduced in 1997 as a means to block spam email from known malicious IP addresses.

The child abuse image content list is a list of URLs and image hashes provided by the Internet Watch Foundation to its partners to enable the blocking of child pornography & criminally obscene adult content in the UK and by major international technology companies.

SafeDNS is a cybersecurity company specializing in providing cloud-based web filtering solutions and AI-powered technology. Its headquarters is in Alexandria, Virginia.

<span class="mw-page-title-main">Domain fronting</span> Technique for Internet censorship circumvention

Domain fronting is a technique for Internet censorship circumvention that uses different domain names in different communication layers of an HTTPS connection to discreetly connect to a different target domain than that which is discernable to third parties monitoring the requests and connections.

<span class="mw-page-title-main">Quad9</span> Global public recursive DNS resolver based in Switzerland

Quad9 is a global public recursive DNS resolver that aims to protect users from malware and phishing. Quad9 is operated by the Quad9 Foundation, a Swiss public-benefit, not-for-profit foundation with the purpose of improving the privacy and cybersecurity of Internet users, headquartered in Zürich. Quad9 is entirely subject to Swiss privacy law, and the Swiss government extends that protection of the law to Quad9's users throughout the world, regardless of citizenship or country of residence.

References

  1. "Technology in Education", http://www.edweek.org/ew/index.html, 1 September 2011
  2. "Children's Internet Protection Act", http://www.fcc.gov, 2011
  3. Spaulding, Jeffrey (2018). D-FENS: DNS Filtering & Extraction Network System for Malicious Domain Names (PhD dissertation). University of Central Florida.

<https://www.fortinet.com/resources/cyberglossary/content-filtering>