| |
| |
Open Source Health Care Alliance: Computer Security Fundamentals, Los Angeles, November 15, 2002.
Introduction (Slide Two)
- who i am
- what i plan to say
- personal experience
- pitfalls
- planning
- resources
- questions
Notice (Slide Three)
"Persons attempting to find a motive in this narrative will be prosecuted;persons attempting to find a moral will be banished; persons attempting to find a plot will be shot."
- Preface for The Adventures of Huck Finn By Mark Twain
Pitfalls (Slide Four)
Pitfalls: Security Through Obscurity (Slide Five)
Pitfalls: Security Though Obscurity (Slide Six)
Outside Connection Attempts to Firewall,
October 14-15 2002, 752 Total Requests
Pitfalls: Have No Fear, I Don't Use Microsoft (Slide Seven)
"The long BSD tradition of cautious development, extensive peer review, and thorough testing makes them some of the most reliable software ever developed. In fact, as far as anyone knows, only one worm has ever been developed that attacked any of the BSDs."
- Source: "The BSDs: Sophisticated, Powerful, and (Mostly) Free"
<http://www.extremetech.com/print_article/0,3998,a=31573,00.asp>
Pitfalls: Have No Fear, I Don't Use Microsoft (Slide Eight)
"since June ... Microsoft, of Redmond, Wash., has released six patches ... for Windows XP Pro. However, the list of patches included in the new Service Pack 1 for XP Pro shows 30 security-related fixes, including several that were never publicized or issued separately."
However, in the same time frame, "Red Hat Inc., of Raleigh, N.C., for example, has issued fixes for 35 security problems in its Red Hat Linux 7.3."
- Source: "Open Source: A False Sense of Security?"
<http://www.eweek.com/article2/0,3959,579097,00.asp>
Pitfalls: WHat's Wrong with This Picture? (Slide Nine)
Creating a Plan (Slide Ten)
Creatling a Plan: Creating a Policy (Slide Eleven)
- what is the system for?
- who will be using this system?
- what network services are needed?
- how do these services work?
- how can i secure these needed services?
Creating a Plan: Creating a Policy (Slide Twelve)
- discovering a vulnerability
- find the fix, workaround
- applying the fix, workaround
Creating a Plan: Creating a Policy (Slide Thirteen)
- being the bad guy, enforce your policy
- known vulnerability + slow on applying fixes = troubles
Resources (Slide Fourteen)
Resources (Slide Fifteen)
Resources (Slide Sixteen)
- commercial vendor
- red hat <->
- i.e. know your vendor
- open source community
- users, developers
- mailing lists, websites
Resources (Slide Seventeen)
Cuckoo's Egg: Tracking a Spy Through the Maze of Computer Espionage
By Cliff Stoll
ISBN No. 0743411463
Resources (Slides Eighteen)
Secrets and Lies: Digital Security in a Networked World
By Bruce Schneier
ISBN No. 0471253111
Resources (Slide Nineteen)
The Code Book: The Science of Secrecy from Ancient Egypt to Quantum Cryptography
by Simon Singh
ISBN No. 0385495323
Additional Resources: This Presentation (Slide Twenty)
What I Said (Slide Twenty One)
- pitfalls
- security through obscurity
- its not just microsoft
- access, remote & physical
- planning
- create a policy
- stick with it
- resources
Questions (Slide Twenty Two)
|
|
|
| |
It is properly said that the Devil can "quote Scripture to
his purpose." The Bible is full of so many stories of
contradictory moral purpose that every generation can
find scriptural justification for nearly any action it
proposes - from incest, slavery, and mass murder to the
most refined love, courage, and self-sacrifice. And this
moral multiple personality disorder is hardly restricted to
Judaism and Christianity. You can find it deep within
Islam, the Hindu tradition, indeed nearly all the world's
religions. Perhaps then it is ... people who are morally
ambiguous.
Scripture is said to be divinely inspired - a phrase with
many meanings. But what if it's simply made up by
fallible humans? Miracles are attested, but what if they're
instead some mix of charlatanry, unfamiliar states of
consciousness, misapprehensions of natural phenomena,
and mental illness? The fact that so little of the finds of
modern science is prefigured in Scripture to my mind
casts further doubt on its divine inspiration.
But of course I might be wrong.
-Carl Sagan
|
|
|