Re: Reactive Firewalls

[Rick Smith <rsmith () securecomputing com>]

At 9:38 AM +1100 2/12/98, Darren Reed wrote:

> Whilst feedback may help the hacker, if it shuts down and needs to be
> manually rebooted, it also slows down the attack considerably.  There's
> also a good chance it will discourage those who are 'trolling' for
> insecure sites/firewalls from making a serious attempt to penetrate
> your firewall.
>
> Personally, I'd prefer a service that fell victim to D.O.S attacks than
> one which could be compromised.

Outside of the intelligence agencies, I've found that Internet savvy
enterprises generally consider denial of service to be as bad or worse a
"compromise" as anything else a hacker might do. This is certainly becoming
true in military environments.


Rick.
smith () securecomputing com                Secure Computing Corporation
"Internet Cryptography" at http://www.visi.com/crypto/ and bookstores