Re: firewall-wizards Digest, Vol 64, Issue 3 phishing
Dave Piscitello <[email protected]> Mon, 15 Apr 2013 13:53:07 -0400
| Newsgroups | gmane.comp.security.firewalls.wizards |
|---|---|
| Message-ID | <CADLVL0L_30uhyOM_bq8qb4DTUyycuARB5VO73YHv4A40QuWRPA@mail.gmail.com> |
Cloud is simply the current incarnation of server (LAN/farm, data center, virtualization...). I really don't see that the security issues have changed all that much (evolved maybe), or approaches to solving them. Look at us. We are in the "Lather, rinse, repeat" business. I recently quoted firewall-wizards threads from 2007 on DDoS in an article. We were discussing a 2000 SANS report encouraging egress address filtering. Still comes down to willingness to spend, will to execute. Too little of both. On Sat, Apr 13, 2013 at 12:26 AM, Marcus Ranum <[email protected]> wrote: >> I suspect that few on this list are comfortable with this scene. The >> pump is there for many because it's keeping the ship afloat while we >> patch and re-think how to prevent future hull breaches. Part of >> re-thinking is coming up with better monitoring (of hull integrity) >> and AWS; part is raising competencies among crew, and part is raising >> security awareness among passengers. All of these require the >> captain's approval and the captain has to empower the officers. >> > > Meanwhile, many of the ship-builders have staked their oars and declared > that they will never go to sea again, but - of course - their customers are > welcome to try out the very inexpensive "cloud ship" offering that "ought to > work just fine." More or less. Have a nice trip. > > mjr. > > -- > Marcus J. Ranum CSO, Tenable Network Security, Inc. > http://www.tenable.com > > > _______________________________________________ > firewall-wizards mailing list > [email protected] > https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards