Internet Newsgroups

Another important body for both network administrators and intruders themselves is Internet newsgroups. Newsgroups are mailing list-type forums where individuals share ideas and past incidents to keep current with the latest security concerns and protection policies. As a network administrator, you must be aware of both standards and topics that intruders are discussing.

The following mailing lists and newsgroups are CERT/CC recommended:

■ Bugtraq—A full-disclosure computer security mailing list. Subscribe through http:// www.securityfocus.com/.

■ NTBugtraq—A moderated forum created to invite the free and open discussion of Windows NT security exploits and bugs. To subscribe, send an e-mail message to [email protected] with "subscribe ntbugtraq firstname lastname" in the body of the message.

■ RussNTSecurity—An open mailing list, lightly moderated, and dedicated to Windows NT security topics. To subscribe, send an e-mail message to [email protected] with "subscribe ntsecurity" in the body of the message.

■ VIRUS-L—A moderated mailing list with a focus on computer virus issues. To be added to the mailing list, send an e-mail message to [email protected].

CERT/CC recommends the following newsgroups:

■ alt.security—Lists computer security issues and other security issues, such as car locks and alarm systems

■ comp.risks—Moderated forum on the risks to the public in computers and related systems

■ comp.security.announce—Computer security announcements, including new CERT advisories, summaries, and vendor-initiated bulletins

■ comp.security.misc—A variety of issues related to computer and network security

■ comp.security.unix—Security information related to the UNIX operating system

■ comp.virus—Computer viruses and related topics

NOTE The following sites also contain a great wealth of information. Although not security specific, they can help you identify the mechanism used to infiltrate technologies such as TCP/IP:

■ Internet Domain Survey (http://www.isc.org/ds/)—Includes Host Count History and pointers to other sources of Internet trend and growth information

■ Internet Engineering Task Force (IETF) (http://www.ietf.org/)—Offers technical papers, best practices, standards, and more

■ Internet Society (ISOC) (http://www.isoc.org/internet/)—Provides an overview of the Internet, including its history and how it works

Was this article helpful?

0 0

Post a comment