Re: Testing the user community

["R. DuFresne" <dufresne () sysinfo com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 2 Feb 2007, Thor (Hammer of God) wrote:

> Not withstanding the value of the other replies, the problem with this
> method is that the outcome doesn't really prove anything one way or the
> other.  If he sends a mock virus out and no one opens it, it doesn't mean
> that they won't open a real one that comes out the next day.  If they do
> open his, that doesn't mean they'll actually open a real one in the future.
>
>
> You can always prove that your users will do something stupid.  That's
> trivial.  If the goal is to actually improve the security posture of your
> userbase, then engage in continued user education - not waste your time
> trying to get them to open a virus.


If user education really worked though, would not alot of companies that 
do just that for other companies work themselves out of a business over 
time?

Or to state it a tad differently; over time would not user education be so 
ingrained that only new hires need attend rather then the bi-yearly or 
quarterly need for "user education" no longer be required?


Thanks,

Ron DuFresne
- -- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        admin & senior security consultant:  sysinfo.com
                        http://sysinfo.com
Key fingerprint = 9401 4B13 B918 164C 647A  E838 B2DF AFCC 94B0 6629

...We waste time looking for the perfect lover
instead of creating the perfect love.

                -Tom Robbins <Still Life With Woodpecker>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFFykHMst+vzJSwZikRAp/VAJ9Ycicem8WM9FIbBwUYXNn041Y3TwCgn4MJ
Wa3FDp9xLlK85rvwljFAZgI=
=B/WD
-----END PGP SIGNATURE-----

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------