New Articles of SecurityFocus this week

From: Alfred Huger (ah_at_securityfocus.com)
Date: 09/11/03

  • Next message: Chris Harrington: "Strange logon attempts to Win2k server"
    Date: Thu, 11 Sep 2003 10:11:49 -0600 (MDT)
    To: pen-test@securityfocus.com
    
    

    1. Demonstrating ROI for Penetration Testing (Part Three)
    By Marcia Wilson Sep 11, 2003
    The third article in this series focuses on defining terms related to the
    Risk Analysis process and touches on Information Asset valuation methods
    that are critical when justifying the necessity and expense of a Pen Test.
    http://www.securityfocus.com/infocus/1730

    2. Hardening the TCP/IP stack to SYN attacks
    By Mariusz Burdach Sep 10, 2003
    This article discusses methods of hardening the TCP/IP stack of various
    operating systems to make servers more resistant to SYN flooding and SYN
    spoofing Denial of Service (DOS) attacks.
    http://www.securityfocus.com/infocus/1729

    Alfred Huger
    Symantec Corp.

    ---------------------------------------------------------------------------
    FREE Trial!
    New for security consultants and in-house pros: FOUNDSTONE PROFESSIONAL
    and PROFESSIONAL TL software. Fast, reliable vulnerability assessment
    technology powered by the award-winning FoundScan engine. Try it free for 21 days at: http://www.securityfocus.com/sponsor/Foundstone_pen-test_030825
    ----------------------------------------------------------------------------


  • Next message: Chris Harrington: "Strange logon attempts to Win2k server"