RE: [inbox] Re: Reacting to a server compromise

[Ron DuFresne <dufresne () winternet com>]

> HIPAA has made it a new world.  The attorneys are already salivating and
> trying to dig up any potential "victims" they can find, look to Arizona as
> an example.  Since this box was used to attacke doctor's records, there is a
> good chance it's tracks will be found.  This guys got two options, either
> don't touch the box, play dumb, and hope the cracker doesn't know how to
> cover his tracks (unlikely), or dd the drive, take the box offline (in that
> order in case it has a smart-bomb planted), and notify notify notify.
>
> We are instituting IDS and logging systems for healthcare customers every
> day and are finding attacks that they would not have even guessed at a year
> ago.  By law they must keep their logs three years, plenty of time for even
> scumbag lawyers to find it.  If you have done due diligence, you will be a
> sitting duck.



HIPAA compliance is much more then logging and IDS.  But, I trust that
this is not the limit of the services DP Solutions provides in such cases.

Of course HIPAA is not a "new world" thing, but, rather a compliance issue
for a new class of users and data.


Thanks,

Ron DuFresne
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
        ***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html