Upcoming Events

Cloud Connect
Santa Clara
Feb 13-16, 2012

Cloud Connect brings together the entire cloud eco-system to better understand the transformation we're experiencing and promises to be the defining event of the cloud computing industry. Learn about the latest cloud technologies and platforms from thought leaders in Cloud Connect’s comprehensive conference.

Register Now!

More Events »

Subscribe to Newsletter

  • Keep up with all of the latest news and analysis on the fast-moving IT industry with Network Computing newsletters.
Sign Up

 
NetNews
N E W S / A N A L Y S I S  


Security Alerts for the Rest of Us

  February 6, 2003
  By Mike Fratto


TOC Issue TOC
Printer Print full article
E-Mail E-Mail this URL
Discuss Discuss this article
flame author Flame the author

I hate reading vulnerability bulletins. Talk about dense material. I sometimes find it difficult to follow explanations about systems I understand well, let alone those about systems I use but don't fully understand.

And I know I'm not alone. Network administrators who aren't immersed in security are just as disadvantaged.

Discuss Join other NWC readers in discussing this article.
The responsibility to issue easily understandable alerts lies with vendors. Not every product user is an expert, but all users need to be aware of security problems so they can take corrective action. This will be difficult, but not impossible. Last November, for instance, Microsoft began issuing separate alerts for technical and nontechnical people. This is a step in the right direction, and I can only hope other vendors follow suit. But you can't leave everything to the vendors.

Nearly all vendors and a few security researchers offer some sort of rating for new vulnerabilities. Although the ratings indicate how serious the author thinks the vulnerability is, you or someone in your organization will have to make that determination once the impact on your network is understood. This may sound obvious, but a threat to your DNS involving spoofing may seem low grade until you realize exactly how much trust we place in an untrustworthy system.


Research and Reports

Hypervisor Derby
August 2011

Network Computing: August 2011

TechWeb Careers