Net Security
 In the Spotlight | More Topics
  from Tony Bradley, your Editor and Guide
Welcome back. It was a little slow this week in terms of developing new content. I am working on an article on VPN's as well as the Wireless Network Security class I have been working on for weeks. Then there are also the ubiquitous book reviews. In the next few days I will post my review of a book I have been anxiously awaiting for months- Malware: Fighting Malicious Code by Ed Skoudis. Stay tuned and have a great week!


 
 

In the Spotlight
How To Use the Nessus Vulnerability Scanner
Last month I posted a brief review of the open-source vulnerability scanner Nessus (see Profile: Nessus Vulnerability Scanner). Harry Anderson has written a detailed introduction to the Nessus program from installing it to using it and describing some of the more advanced options available. If you are interested in seeing what this free vulnerability scanner can do for you I recommend you take a look at this SecurityFocus.com article first: Introduction to Nessus.
 
      
More Topics
ISS X-Force White Paper: Risk Exposure Through Instant Messaging And Peer-To-Peer (P2P) Networks
Hacking Exposed Chat Session
Mea Culpa or Tu Culpa?
Profile: Nessus Vulnerability Scanner
Free Encryption Software
Hacker Tools
SANS GIAC Security Certifications
Backdoor Planted in Linux Kernel
A development version of an upcoming release of the Linux kernel code was found to contain a small, but very sophisticated backdoor. During routine integrity checks of the code a discrepancy was found. The error was small and under casual inspection most likely would have passed as a typo or other accident. However, it was later discovered that this simple and subtle change in the kernel code would grant the attacker root administrative privileges. The malicious code has been removed and an investigation is underway to determine how the development site was compromised. For more about this story you can read Kevin Poulsen's article on SecurityFocus.com
 
Information Security is "Like an Airport"
The traditional metaphor for information security is a house (or castle, or fortress). Parallels are drawn comparing doors and windows to holes in your network security and locks and alarms to how you secure your network perimeter and monitor and alert on unauthorized intrusions. In this ComputerWeekly.com article John Riley proposes a new metaphor: an airport. "It is no longer fashionable to regard security as a fortress to keep people out. The new analogy is an airport, where anyone can enter, but access to different areas is then strictly policed by a series of checks and controls."
 
Featured Offer
 

 
Visit Related About GuideSites:
Antivirus Software Electronic Commerce Focus on PC Support
Focus on Windows Wireless / Networking  
 
    Search About  

More Newsletters: To sign up for more free newsletters on What You Need to Know About your favorite topics, visit: http://talk.about.com

You are receiving this newsletter because you subscribed to the About Net Security newsletter as #EmailAddr#. If you no longer wish to receive emails from us, please visit:
http://about.com/nl/usgs.htm?nl=netsecurity&e=#EmailAddr#

About respects your privacy. Our Privacy PolicyOur Contact Information.
© 2003 About, Inc.