Internet Newsgroups

Another important body for both network administrators and intruders themselves is Internet newsgroups. Newsgroups are mailing list-type forums where individuals share ideas and past incidents to keep current with the latest security concerns and protection policies. As a network administrator, you must be aware of both standards and topics that intruders are discussing.

The following mailing lists and newsgroups are CERT/CC recommended:

■ Bugtraq—A full-disclosure computer security mailing list. Subscribe through http://

■ NTBugtraq—A moderated forum created to invite the free and open discussion of Windows NT security exploits and bugs. To subscribe, send an e-mail message to [email protected] with "subscribe ntbugtraq firstname lastname" in the body of the message.

■ RussNTSecurity—An open mailing list, lightly moderated, and dedicated to Windows NT security topics. To subscribe, send an e-mail message to [email protected] with "subscribe ntsecurity" in the body of the message.

■ VIRUS-L—A moderated mailing list with a focus on computer virus issues. To be added to the mailing list, send an e-mail message to [email protected].

CERT/CC recommends the following newsgroups:

■—Lists computer security issues and other security issues, such as car locks and alarm systems

■ comp.risks—Moderated forum on the risks to the public in computers and related systems

■—Computer security announcements, including new CERT advisories, summaries, and vendor-initiated bulletins

■—A variety of issues related to computer and network security

■—Security information related to the UNIX operating system

■ comp.virus—Computer viruses and related topics

NOTE The following sites also contain a great wealth of information. Although not security specific, they can help you identify the mechanism used to infiltrate technologies such as TCP/IP:

■ Internet Domain Survey (—Includes Host Count History and pointers to other sources of Internet trend and growth information

■ Internet Engineering Task Force (IETF) (—Offers technical papers, best practices, standards, and more

■ Internet Society (ISOC) (—Provides an overview of the Internet, including its history and how it works

0 0

Post a comment