Full Disclosure mailing list archives
RE: Top 15 Reasons Why Admins Use Security Scan ners
From: Frank Knobbe <frank () knobbe us>
Date: Wed, 28 Apr 2004 18:32:39 -0500
On Wed, 2004-04-28 at 17:04, Harlan Carvey wrote:
Someone should be. Admins should be to confirm that their environment is in the state that they believe it to be.I guess we'll have to agree to disagree. In my experience, the guy who set a system up shouldn't be the one to inspect it, or verify it.
and
With regards to the rest of your comments, I think you're missing the point. I'm not saying that a security scanner shouldn't be run...I just don't think that admins should be the ones to run the scanner.
Heya Harlan, long time. I think you are missing the point. I don't think Stuart is saying that the admins should also be the auditors. But they should run scanners and other security tools to verify that they did their job correctly. But only to the extend to make corrections and such. They should not perform an "audit" per se. You still need independent (either outside the company or an audit department) that runs those tools (and more) themselves during the audit that will generate a report to management. This is probably what you are thinking of. I don't think we're saying admins should audit themselves. But admins should run tools to ensure that they did their job ok. Cheers, Frank -- Warning at the Gates of Bill: Abandon hope, all ye who press <ENTER> here...
Attachment:
signature.asc
Description: This is a digitally signed message part
Current thread:
- RE: Top 15 Reasons Why Admins Use Security Scan ners Starford, Christopher D. (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Harlan Carvey (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Ron DuFresne (Apr 30)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Ron DuFresne (Apr 30)
- <Possible follow-ups>
- RE: Top 15 Reasons Why Admins Use Security Scan ners Stuart Fox (DSL AK) (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Harlan Carvey (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Frank Knobbe (Apr 28)
- Re: Top 15 Reasons Why Admins Use Security Scan ners Jeremiah Cornelius (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Harlan Carvey (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Vanish Pattni (DSL AK) (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Harlan Carvey (Apr 28)