Security Basics mailing list archives
Re: application for an employment
From: "Micheal Espinola Jr" <michealespinola () gmail com>
Date: Wed, 5 Apr 2006 12:07:43 -0400
I don't want to get involved in this debate, but I would hazard that in legalese, the distinguishing factor would be intent. A portscan would typically exhibit different behavior to its connection patterns, and depending on what is being scanned (and probably the history patterns of those connections), intent can be implied. On 4/3/06, David Gillett <gillettdavid () fhda edu> wrote:
Using a web server is NOT a port scan - in any manner.A portscan makes a connect(), a web browser makes a connect(). Please explain where exactly you see the difference. Especially on layer 4.A port *scan* involves multiple connect() calls (which may or may not succeed), to multiple ports and/or multiple addresses. The connections thus established are not actually used to render the service for which the port(s) accept connections. Distinguishing between a web client access and a port scan isn't so hard. Why must you pretend they're indistinguishable? David Gillett --------------------------------------------------------------------------- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. http://www.msia.norwich.edu/secfocus ---------------------------------------------------------------------------
-- ME2 --------------------------------------------------------------------------- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. http://www.msia.norwich.edu/secfocus ---------------------------------------------------------------------------
Current thread:
- Re: application for an employment, (continued)
- Re: application for an employment Ansgar -59cobalt- Wiechers (Apr 03)
- Message not available
- Re: application for an employment Ansgar -59cobalt- Wiechers (Apr 05)
- Message not available
- Re: application for an employment Ansgar -59cobalt- Wiechers (Apr 03)
- RE: application for an employment David Gillett (Apr 03)
- Re: application for an employment Ansgar -59cobalt- Wiechers (Apr 03)
- Re: application for an employment Anthony Ettinger (Apr 03)
- Re: RE: application for an employment cwright (Apr 03)
- Re: application for an employment Ansgar -59cobalt- Wiechers (Apr 03)
- RE: application for an employment David Gillett (Apr 04)
- Re: application for an employment Ansgar -59cobalt- Wiechers (Apr 04)
- Re: application for an employment D. Bolliger (Apr 05)
- Re: application for an employment Micheal Espinola Jr (Apr 05)
- Re: application for an employment Ansgar -59cobalt- Wiechers (Apr 03)
- Re: application for an employment Ansgar -59cobalt- Wiechers (Apr 03)
- Re: application for an employment Ansgar -59cobalt- Wiechers (Apr 03)
- Re: application for an employment Ansgar -59cobalt- Wiechers (Apr 04)