|
Security
Awareness = Victim Prevention
"The methods that will
most effectively minimize the ability of
intruders to compromise information
security are comprehensive user training
and education. Enacting policies and
procedures simply won't suffice. Even
with oversight the policies and
procedures may not be effective: my
access to Motorola, Nokia, ATT, Sun
depended upon the willingness of people
to bypass policies and procedures that
were in place years before I compromised
them successfully." - Kevin Mitnick
Threat Level:
INFOCon Definitions:
|
Green: |
Everything is
normal. No significant new
threat known. |
|
Yellow: |
We are currently
tracking a significant new
threat. The impact is either
unknown or expected to be minor
to the infrastructure. However,
local impact could be
significant. Users are advised
to take immediate specific
action to contain the impact.
Example: 'MSBlaster' worm
outbreak. |
|
Orange: |
A major
disruption in connectivity is
imminent or in progress.
Examples: Code Red on its
return, and SQL Slammer worm
during its first half day |
|
Red: |
Loss of connectivity across
a large part of the internet. |
IS&T Security DocumentationEducational LinksOther Security Links
|
Don't be a SAP
