ISAW: Why are malicious hackers succeeding?
Wednesday
Dec 8, 2004
A 6 December post on the Internet Security and Warfare (ISAW) weblog.
ISAW (Internet Security And Warfare):
…
Malicious hackers are always one step ahead of everyone else. Most of the time sysads will only know that their system has been compromised when their website is defaced or when they detect that their system is acting weird. By then, it’s already too late because it means that somebody has already been inside the system.
…
Recommendations:
(1) Absolute security can never be achieved. Instead of using anti-anything alone (spam, virus, hacker, spyware, etc.), it is also important to properly educate system users. These two things, when coupled together, will result in a more secure network.
(2) Network security should be proactive; do not wait for security breaches to happen before doing something to secure your network.
(3) Develop sound security policy and force users to follow it. A policy is an outline of security practices that every employee in a company should follow.
(4) Subscribe to security mailing lists to be updated on what is going on. Patch and update your system regularly to avoid breaches.
(5) READ, READ, READ.
(posted by PI Flashbulb)
Sensible Recommendations, IMHO. Anyone interested in securing their systems should act proactively. After all, hackers with malicious intent (i.e. crackers) are usually one step ahead of everyone else in terms of security (and breaches, thereof).
- Angelo
Comment Form