Re: application for an employment

["Micheal Espinola Jr" <michealespinola () gmail com>]

I don't want to get involved in this debate, but I would hazard that
in legalese, the distinguishing factor would be intent.

A portscan would typically exhibit different behavior to its
connection patterns, and depending on what is being scanned (and
probably the history patterns of those connections), intent can be
implied.


On 4/3/06, David Gillett <gillettdavid () fhda edu> wrote:
> > > Using a web server is NOT a port scan - in any manner.
> >
> > A portscan makes a connect(), a web browser makes a
> > connect(). Please explain where exactly you see the
> > difference. Especially on layer 4.
>
>  A port *scan* involves multiple connect() calls (which may
> or may not succeed), to multiple ports and/or multiple addresses.
> The connections thus established are not actually used to render
> the service for which the port(s) accept connections.
>
>  Distinguishing between a web client access and a port scan
> isn't so hard.  Why must you pretend they're indistinguishable?
>
> David Gillett
>
>
>
> ---------------------------------------------------------------------------
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The Norwich University program offers unparalleled Infosec management
> education and the case study affords you unmatched consulting experience.
> Tailor your education to your own professional goals with degree
> customizations including Emergency Management, Business Continuity Planning,
> Computer Emergency Response Teams, and Digital Investigations.
>
> http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------------


--
ME2

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------