Aaron Curtis's Profile

IDS products cannot see inside an SSL-encrypted packet any more than our adversaries can.

There remain many things that NIDS tools are extremely effective at detecting. Outbreaks of (known) viruses, worms, malware, etc., can stand out like a sore thumb on a network that is being monitored using NIDS tools.

The Wal-Mart intrusion began unraveling on Nov. 5, 2006, when the company’s IT security group was brought in to investigate the server crash.

The intruder had reached the machine through a VPN account assigned to a former Wal-Mart worker in Canada, which administrators had failed to close after the worker left the company.

Excel is not a database management system. It is spreadsheet software, and it stores units of information in rows and columns of cells, called worksheets. The most common task performed in Excel is the management of lists such as telephone numbers and personnel data. In comparison, Access stores data in tables that look much the same as worksheets but are designed for complex querying in relation to data stored in other tables and locations, and even in fields in other tables.

If you can store your data logically in a single table or worksheet, then do it.

If you are an Internet service provider, please pay particular attention to
Section III and Appendix A, which describes step we urge you to take to
lessen the effects of these attacks. If you are the customer of an Internet
service provider, please encourage your provider to take these steps.

Since the SYN ACK is destined for an incorrect or non-existent host, the last part of the "three-way handshake" is never completed and the entry remains in the connection queue until a timer expires, typically for about one minute. By generating phony TCP SYN packets from random IP addresses at a rapid rate, it is possible to fill up the connection queue and deny TCP services (such as e-mail, file transfer, or WWW) to legitimate users.

most web servers fail almost instantly under five or six thousand connections/sec.

This method of attack can be prevented by specifying in the p2p protocol which ports are allowed or not. If port 80 is not allowed, the possibilities for attack on websites can be very limited.

businesses feel compelled
to invest in cutting-edge information technology to stay competitive; but
they persist in seeing offices as assembly lines, rather than as think tanks,
for producing knowledge-based products and services.

With users belonging to groups, you can allocate resource access permissions to the group one time rather than individually to each user in that group.

With users belonging to groups, you can allocate resource access permissions to the group one time rather than individually to each user in that group.