Re: BS7799 and ISO17799

From: Meritt James (meritt_james@bah.com)
Date: 07/27/01 

Message-ID: <3B61976B.48F6C45F@bah.com>
Date: Fri, 27 Jul 2001 12:31:39 -0400
From: "Meritt James" <meritt_james@bah.com>
To: Carmelo Floridia <cfloridia@lex.unict.it>
Subject: Re: BS7799 and ISO17799

Besides that minor "BS" is "british standard" and "iso" isn't. Not a
lot - unless you care to consider the source, how much it costs to get a
copy and such.

Carmelo Floridia wrote:
>
> What's the difference between BS7799 and ISO17799?
> best regards Carmelo
>
> -----Messaggio originale-----
> Da: Pete Sherwood [mailto:petersherwood@home.com]
> Inviato: mercoledì 25 luglio 2001 23.36
> A: Dom De Vitto; Patrick Smallwood
> Cc: SECURITY-BASICS@securityfocus.com; vuln-dev@securityfocus.com
> Oggetto: Re: A code red that could bring down the net?
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> [snip]
>
> > I give up...who is William T Morris? My G-Dads name is Morris Williams,
> > but he doesnt like the Internet, much less interested in a "Big DoS" of
> > it...
>
> [snip]
>
> > I think a guy called William 'T' Morris may have had this idea first.
> > Allegedly :-)
>
> Robert T. Morris!
>
> > History. History. History.
>
> OK. Here is one explanation:
>
> In 1988, the ARPANET had its first automated network security incident,
> usually referred to as "the Morris worm" (4). A student at Cornell
> University (Ithaca, NY), Robert T. Morris, wrote a program that would
> connect to another computer, find and use one of several vulnerabilities to
> copy itself to that second computer, and begin to run the copy of itself at
> the new location. Both the original code and the copy would then repeat
> these actions in an infinite loop to other computers on the ARPANET. This
> "self-replicating automated network attack tool" caused a geometric
> explosion of copies to be started at computers all around the ARPANET. The
> worm used so many system resources that the attacked computers could no
> longer function. As a result, 10% of the U.S. computers connected to the
> ARPANET effectively stopped at about the same time.
>
> See:
> http://www.cert.org/encyc_article/tocencyc.html
>
> > Dom
>
> Pete Sherwood
> 613-260-0612 (home/office)
> 613-591-8900 ext. 525 (voice-mail)
> PGP and Thawte digital keys available @
> http://members.home.net/petersherwood/
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>
>
> iQA/AwUBO187kromytMtxLfsEQLWxwCfRXrglPH1Tu7EPe8+tL/KAbaRAooAoIaM
> 4EbW55WMlKfsLEDpliqkHkTq
> =EScm
> -----END PGP SIGNATURE----- 

-- 
James W. Meritt, CISSP, CISA
Booz, Allen & Hamilton
phone: (410) 684-6566

Relevant Pages

  • Re: BS7799 and ISO17799
    ... as a Cerified Auditor to audit against the BS7799 Standard. ... > I think a guy called William 'T' Morris may have had this idea first. ... In 1988, the ARPANET had its first automated network security incident, ... explosion of copies to be started at computers all around the ARPANET. ...
    (Security-Basics)
  • Re: BS7799 and ISO17799
    ... Maltese standard on information security management. ... > I think a guy called William 'T' Morris may have had this idea first. ... In 1988, the ARPANET had its first automated network security incident, ... explosion of copies to be started at computers all around the ARPANET. ...
    (Security-Basics)
  • RE: A code red that could bring down the net?
    ... > I think a guy called William 'T' Morris may have had this idea first. ... Robert T. Morris! ... In 1988, the ARPANET had its first automated network security incident, ... explosion of copies to be started at computers all around the ARPANET. ...
    (Security-Basics)
  • RE: A code red that could bring down the net?
    ... > I think a guy called William 'T' Morris may have had this idea first. ... Robert T. Morris! ... In 1988, the ARPANET had its first automated network security incident, ... explosion of copies to be started at computers all around the ARPANET. ...
    (Vuln-Dev)
  • Re: A code red that could bring down the net?
    ... You conjecture that if code-red were your worm, you would have let it run ... worm before sending it onto the arpanet. ... network security incident,usually referred to as "the Morris worm". ... would then repeat these actions in an infinite loop to other computers on ...
    (Security-Basics)