Forum Moderators: phranque

Message Too Old, No Replies

SANS/FBI Names Top 20 Network Threats

An important list

         

cyril kearney

1:38 pm on Oct 3, 2002 (gmt 0)

10+ Year Member



Here is the url:
[internetnews.com...]

Ten threats are listed for Windows and ten for Unix.

I often tell groups that technology alone cannot solve the security problem. I ask people to consider that people and businesses have been trying to secure their homes, stores and offices for hundreds of years. Still break-ins occur. Most people cannot afford to guard places like they do the crown jewels of England or Fort Knox in the United States.

We back up security with laws that punish people that break-in. There is a basic sentence, which is escalated by the amount of damage and theft. Under federal law a theft of about a half million dollars means 3 years in jail, of which 85% must actually be served.

This is not a perfect deterrent but keeps crime in check. Routinely, security breeches cause multi-million dollar damage and the offenders get sentences of a few months. Strong basic sentences should be enacted against those that break in. Their sentences should rise proportionate to the damage they do. Crime statistics should be collected and disseminated. If we can curb drunk driving, certainly we can curb the cyber-terrorist.

Anti-terrorism legislation should be enacted to punish those that disseminate bomb-making and other terrorist material. It should extend to those that facilitate cyber-terrorism. The days of cloaking the cyber-terrorist in a mantle of a super geek must end. Just as rapists aren't super studs, cyber-terrorist aren't folk heroes.