Database Security (Common-sense Principles)
Places that viruses and trojans hide on start up
Step-by-Step Guide to Using the Security Configuration Tool Set
Improving the Security of Your Site by Breaking Into it
Domain Name Robbery
XDCC - An .EDU Admin's Nightmare
Database Security
Database Security
Is Database Security an Oxymoron?
Database security: protecting sensitive and critical information
The database security blanket
Database security in your Web-enabled apps
Making Your Network Safe for Databases
SQL Injection: Modes of Attack, Defence, and Why It Matters
Database Security in High Risk Environments
Linksys Router Information (A collection)
Common Ports
Protection of the Administrator Account in the Offline SAM
Windows 2000 Security
The dangers of ftp conversions on misconfigured systems
Win98.BlackBat
AnnaKournikova worm decrypted
C/C++ made easy with GoGooSE 1.0
UNIX Bourne Shell Programming
BATCH ProgramminG
Assembly for nerds using linux
THE LATEST IN DENIAL OF SERVICE ATTACKS: "SMURFING"
The Ingredients to ARP Poison
Outlook 2002: can't send .exe file with Email
Windows 9x/Me Security and System Restrictions
Exploiting The IPC Share
Local Windows hacking
Windows Cryptic Error Messages
Windows NT Registry Tutorial
catch a macro virus
Protecting Files with Windows NTXP
Microsoft Baseline Security Analyzer V1.1
A Beginners Guide To Wireless Security
Default Logins and Passwords for Networked Devices
How To Eliminate The Ten Most Critical Internet Security Threats
About computer crime
System Backdoor Information
System Backdoors Explained
Introduction to Buffer Overflow
Donald Pipkin's Security Tips for the Week of December 23rd
Getting IP data from numerous sources
Rainbow Series Library [The One The Only]
Honeypots (Definitions and Value of Honeypots)
General Attack Descriptions
Wireless Taping
CYBERTERRORISM
Security from a different angle
 

 

National Strategy to Secure Cyberspace -04 Feb 2003

Though it is taking a embarrassing amount of time for our federal government to finally come up with a structured plan and method of operations for dealing with cyber terrorism, we've once again fallen into the pit of possibly sacrificing our citizens privacy in order to provide tighter security for citizens.

 

One of the many key elements that the proposal outlines is that the present to develop a centralized network operations center that will complement the federal governments cyberspace security center.   It is in this fashion of the government hopes combine resources of both the private sector in the federal government.   These two agencies would act as a liaison to both the federal and private sector groups.   So far so good, the plan and seems to have merit.   But, is right about here that some red flags are raised.

 

The portion of the initiative where we decide to run off the road, is one recommends that the Department of Justice work with the Census Bureau to develop " better data about the victims of cyber crime and intrusions.   " .   Now let's hold on here second, what data are we going to actually collect here?

 

Another key point of interest, is the fact that the security vulnerabilities and shortcomings the domain name system and the IP system are still not addressed.   I'm sure this is appointed exasperation further secure professionals as well.

 

Unfortunately, there's no mention of the federal government using any sort of open source software or even trying to find an alternative to Microsoft products.   This is a shortcomings that once again opens a set to the security flawless of a single source product.

     

If you have any questions or comments please feel free to contact me at admin@governmentsecurity.org
Original story at http://www.eweek.com/article2/0,3959,861870,00.asp