Having a proactive approach to security. What does that mean? In my opinion it means keeping up
with all the latest exploits, trends, and hacking methods and actually trying them regularly on your server, including local root exploits and other nasty things.
A great number admins are either too lazy, too ignorant, or too scared to put these methods to work for them. And some just do not care, they figure they would rather just restore a backup without fixing the problem that made them have to restore in the first place. This is becoming a big problem as more uneducated, unqualified, and lazy admins are running servers now which leads to the Internet infested with their compromised machines sending spam, dos attacks, and brute force attacks of other servers,
The thing is you cannot depend on your distro’s security and development team to come out with secure and timely patches in order to protect your box and most admins just do a fresh install, install control panel, and leave it alone. Even some control panel software will prevent you from updating your machine and will interfere with security procedures you put in place. Evolution-Security » Security » Proactive Security
From around the Web
- Windows Vista Service Pack 2 Latest Release Schedule
- Vista SP2: What is inside?
- NetWitness releases free version of security software
- Three Reasons Why Users Won’t Buy Into Security
- Automated security testing & its limitations
- Google Wants to Preinstall Chrome Browser on PCs
- Mozilla warns of Firefox China add on
- Firefox No Longer an Automatic Defense Against Browser Drive Bys
- Google patches Chrome file stealing bug
- Apple plays catch up, adds anti fraud safeguard to Safari
- Researchers find vulnerability in Windows Vista
- How to Use Network Behavior Analysis Tools
- The insider security threat in IT and financial services
- Windows 7 security: An overall improvement?
- Windows 7 UAC could be less of a nag