Holey Server, Networkman!

摘要

I'll be the first to admit that ACME doesn't have a perfect network, perfect security or perfect IT processes. After all, working in IT is all about knowing your weaknesses—and finding ways to fix them. However, you never want to discover vulnerabilities through the exploits of someone outside your company. Unfortunately, that's exactly what happened to ACME recently. Bucky Rogers, our IT security manager, stepped into my office to report a regrettable discovery by our network administrator: An outsider had compromised a Web-facing box on the network. Ironically, we had just hired an IT security consulting firm to do an independent vulnerability assess-ment—but the assessment hadn't started yet.