Security
Awareness = Victim
Prevention
"The methods that will most effectively minimize the ability of intruders to compromise information security are comprehensive user training and education. Enacting policies and procedures simply won't suffice. Even with oversight the policies and procedures may not be effective: my access to Motorola, Nokia, ATT, Sun depended upon the willingness of people to bypass policies and procedures that were in place years before I compromised them successfully." - Kevin Mitnick
Threat Level:
INFOCon Definitions:
| Green: |
Everything is normal. No significant new threat known. |
| Yellow: |
We are currently tracking a significant new threat. The impact is either unknown or expected to be minor to the infrastructure. However, local impact could be significant. Users are advised to take immediate specific action to contain the impact. Example: 'MSBlaster' worm outbreak. |
| Orange: |
A major disruption in connectivity is imminent or in progress. Examples: Code Red on its return, and SQL Slammer worm during its first half day |
| Red: |
Loss of connectivity across a large part of the internet. |
IS&T Security Documentation
Educational Links
Other Security Links