Security Basics mailing list archives

Re: Re: Tracking down anonymous user


From: tima.soni () gmail com
Date: 29 Dec 2006 21:37:25 -0000

Hi Mike,

You may try to add another layer of authentication where in a user supplies his/ her credentials before accessing any 
shared resource. We have this implemented in our environment...

Passwords should never be shared. So you should also work on defining and implementing a policy where in you can 
question the accountability of any user using any account. Every user accessing any asset with in your organization 
should have his/ her own unique user ID. 

Regards

Tima


Current thread: