Re: Security Policy methodologies

[Aleph One <aleph1 () dfw net>]

> I suggest you read John D. Howard's PhD dissertation, "An Analysis Of
> Security Incidents On The Internet 1989 - 1995". It has some solid
> statistics and trend analysis on the incidents reported to CERT during
> that time period. It also contains an interesting attack taxonomy. But at
> about 300 pages it is not a one night read.

My apologies to all. I should have included the url. Here it is:

http://www.cert.org/research/JHThesis/

Aleph One / aleph1 () dfw net
http://underground.org/
KeyID 1024/948FD6B5 
Fingerprint EE C9 E8 AA CB AF 09 61  8C 39 EA 47 A8 6A B8 01