Re: Internal vs external threats, any references?

1999-10-07 Thread amir . herzberg
CTED] New Lotus notes mail: amir herzberg/haifa/ibm@IBMIL Rick Smith <[EMAIL PROTECTED]> on 05/10/99 23:48:24 Please respond to Rick Smith <[EMAIL PROTECTED]> To: Ben Laurie <[EMAIL PROTECTED]> cc: [EMAIL PROTECTED] (bcc: Amir Herzberg/Haifa/IBM) Subject: Re: Internal vs exte

Re: Internal vs external threats, any references?

1999-10-05 Thread Rick Smith
I said: >> If it's programmable it's vulnerable. Ben Laurie replied: >Oh, right. There's no attack you can defend against, right? One has to be careful with one's universal quantifiers. "There's no attack you can defend against." - false "There are defenses against some attacks." - true "Ther

Re: Internal vs external threats, any references?

1999-10-04 Thread Marc Horowitz
Ben Laurie <[EMAIL PROTECTED]> writes: >> How does this trojan horse or virus get onto the targetted computer? I >> don't know what you run behind your firewalls, but I certainly don't run >> anything that could get trojaned or virused. There are very few interesting sites which don't have large

Re: Internal vs external threats, any references?

1999-10-04 Thread David Honig
At 08:57 AM 10/4/99 +0100, Ben Laurie wrote: >How does this trojan horse or virus get onto the targetted computer? I >don't know what you run behind your firewalls, but I certainly don't run >anything that could get trojaned or virused. Yes, but you're not the only one on your LAN. Is everyone a

Re: Internal vs external threats, any references?

1999-10-04 Thread Steven M. Bellovin
In message <[EMAIL PROTECTED]>, [EMAIL PROTECTED] writes: >A commonly-held conception in the commercial world (in my experience) is that >most threats to "corporate security" come from the Internet-at-large, and >therefore being behind a firewall is a Good Thing and generally Sufficient. > >Of

Re: Internal vs external threats, any references?

1999-10-04 Thread Ben Laurie
[EMAIL PROTECTED] wrote: > > Jeff says/asks, > > > A commonly-held conception in the commercial world (in my experience) is that > > most threats to "corporate security" come from the Internet-at-large, and > > therefore being behind a firewall is a Good Thing and generally Sufficient. > > I be

Re: Internal vs external threats, any references?

1999-10-03 Thread amir . herzberg
Jeff says/asks, > A commonly-held conception in the commercial world (in my experience) is that > most threats to "corporate security" come from the Internet-at-large, and > therefore being behind a firewall is a Good Thing and generally Sufficient. I believe this is a very wrong notion. Howev

RE: Internal vs external threats, any references?

1999-10-02 Thread Tsolis, Kristen
> Do any folks out there have any pointers to docs, study reports, > whathaveyou > that provide quanifiable evidence about either or both external or > internal > threats? > an oft-cited report: Issues and Trends: 1999 CSI/FBI Computer Crime and Security Survey http

Internal vs external threats, any references?

1999-10-01 Thread Jeff . Hodges
A commonly-held conception in the commercial world (in my experience) is that most threats to "corporate security" come from the Internet-at-large, and therefore being behind a firewall is a Good Thing and generally Sufficient. Of course there are many references in the literature which dispute