[ale] FW: [blt] couple of good reads on security

[Allen, Paula J.]

Found this to be very good reading ...pj

-----Original Message-----
From: Henry White [mailto:henryw at gte.net]
To: ale at ale.org
Sent: Wednesday, June 07, 2000 11:39 PM
To: blt
Subject: [blt] couple of good reads on security


"This paper... studies step by step a successful attack of a system.
...we will focus on how we learned what happened and pieced the
information together. The purpose is to give you the forensic skills
necessary to analyze and learn on your own the threats your
organization faces."

http://rootprompt.org/article.php3?article=520


"The majority of successful attacks on computer systems via the
Internet can be traced to exploitation of one of a small number of
security flaws. ... "System administrators report that they have not
corrected these flaws because they simply do not know which of over 500
potential problems are the ones that are most dangerous, and they are
too busy to correct them all."

http://www.sans.org/topten.htm

<grin> "...too busy to correct them all"?  Doing what?  Studying for
their MCSE?  And just how busy do they expect to be after some
miscreant does break in?
  
-- 
Henry White			
mailto:henryw at gte.net		
___________________________________________________________
T O P I C A  The Email You Want. http://www.topica.com/t/16
Newsletters, Tips and Discussions on Your Favorite Topics

--
To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.