Another important body for both network administrators and intruders themselves is Internet newsgroups. Newsgroups are mailing list-type forums where individuals share ideas and past incidents to keep current with the latest security concerns and protection policies. As a network administrator, you must be aware of both standards and topics that intruders are discussing.
The following mailing lists and newsgroups are CERT/CC recommended:
■ Bugtraq—A full-disclosure computer security mailing list. Subscribe through http:// www.securityfocus.com/.
■ NTBugtraq—A moderated forum created to invite the free and open discussion of Windows NT security exploits and bugs. To subscribe, send an e-mail message to [email protected] with "subscribe ntbugtraq firstname lastname" in the body of the message.
■ RussNTSecurity—An open mailing list, lightly moderated, and dedicated to Windows NT security topics. To subscribe, send an e-mail message to [email protected] with "subscribe ntsecurity" in the body of the message.
■ VIRUS-L—A moderated mailing list with a focus on computer virus issues. To be added to the mailing list, send an e-mail message to [email protected].
CERT/CC recommends the following newsgroups:
■ alt.security—Lists computer security issues and other security issues, such as car locks and alarm systems
■ comp.risks—Moderated forum on the risks to the public in computers and related systems
■ comp.security.announce—Computer security announcements, including new CERT advisories, summaries, and vendor-initiated bulletins
■ comp.security.misc—A variety of issues related to computer and network security
■ comp.security.unix—Security information related to the UNIX operating system
■ comp.virus—Computer viruses and related topics
NOTE The following sites also contain a great wealth of information. Although not security specific, they can help you identify the mechanism used to infiltrate technologies such as TCP/IP:
■ Internet Domain Survey (http://www.isc.org/ds/)—Includes Host Count History and pointers to other sources of Internet trend and growth information
■ Internet Engineering Task Force (IETF) (http://www.ietf.org/)—Offers technical papers, best practices, standards, and more
■ Internet Society (ISOC) (http://www.isoc.org/internet/)—Provides an overview of the Internet, including its history and how it works
Was this article helpful?