Maximum Security, Third Edition

Chapter 25. Mining the Data Monster

In This Chapter

• Information Overload

• How Much Security Do You Need?

• General Sources

• Mailing Lists

• Usenet Newsgroups

• Vendor Security Mailing Lists, Patch Depositories, and Resources

Computer security is a process, not a product. The process is constant, and not following it can prove disastrous. Generally speaking, the security process goes something like this:

1. After configuring your system as securely as possible with help from resources discussed in this chapter, you, or some other party, discover a vulnerability.

2. An exploit for that vulnerability becomes public knowledge.

3. Your system's vendor responds, typically with a patch or upgrade.

4. By staying on top of alerts posted by vendors and security organizations, you learn ...