All,<br><br>We've been talking some about security recently.<br><br>Does anyone know a resource that provides a matrix style layout of tools that are available?<br><br>ie.<br>
<style>
<!--
BODY,DIV,TABLE,THEAD,TBODY,TFOOT,TR,TH,TD,P { font-family:"Calibri"; font-size:x-small }
-->
</style>
<table frame="VOID" rules="NONE" cols="5" border="0" cellspacing="0">
<colgroup><col width="136"><col width="86"><col width="86"><col width="86"><col width="86"></colgroup>
<tbody>
<tr>
<td valign="BOTTOM" width="136" height="19" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" width="86" align="LEFT"><font color="#000000">perimeter</font></td>
<td valign="BOTTOM" width="86" align="LEFT"><font color="#000000">core routers</font></td>
<td valign="BOTTOM" width="86" align="LEFT"><font color="#000000">servers</font></td>
<td valign="BOTTOM" width="86" align="LEFT"><font color="#000000">workstations</font></td>
</tr>
<tr>
<td valign="BOTTOM" height="19" align="LEFT"><font color="#000000">virus</font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
</tr>
<tr>
<td valign="BOTTOM" height="19" align="LEFT"><font color="#000000">Phishing</font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
</tr>
<tr>
<td valign="BOTTOM" height="19" align="LEFT"><font color="#000000">rbot</font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
</tr>
<tr>
<td valign="BOTTOM" height="19" align="LEFT"><font color="#000000">embedded intruder</font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
</tr>
<tr>
<td valign="BOTTOM" height="19" align="LEFT"><font color="#000000">rogue employee</font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
</tr>
<tr>
<td valign="BOTTOM" height="17" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
<td valign="BOTTOM" align="LEFT"><font color="#000000"><br></font></td>
</tr>
</tbody>
</table>
<br>The above is just a quick and dirty effort to list attacks on the left, and layers of defense across the top.<br><br>My hope is to find (or create) a chart like the above, but filled in with tools. AV, firewall, NIDS, HIDS, etc. (I care less about brand names than I do tool categories, but in some cases like Damballa, they may be the only tool in one of the matrix squares.)<br>
<br>Thanks<br>Greg<br>-- <br>Greg Freemyer<br>Head of EDD Tape Extraction and Processing team<br>Litigation Triage Solutions Specialist<br><a href="http://www.linkedin.com/in/gregfreemyer">http://www.linkedin.com/in/gregfreemyer</a><br>
CNN/TruTV Aired Forensic Imaging Demo -<br> <a href="http://insession.blogs.cnn.com/2010/03/23/how-computer-evidence-gets-retrieved/">http://insession.blogs.cnn.com/2010/03/23/how-computer-evidence-gets-retrieved/</a><br>
<br>The Norcross Group<br>The Intersection of Evidence & Technology<br><a href="http://www.norcrossgroup.com">http://www.norcrossgroup.com</a><br><br>