Re: [nukkad] Anatomy of a webpage hack

["aryaone" <>]

----------------------------------------------------------------------------
Tip of the day:  Remember, this "nukkad" is international.
----------------------------------------------------------------------------

Harshal wrote:
< He (I will just use 'he' from now on) exploited a bug in one specific
script on the website. He was searching the web for sites that use that
particular script (it is a popular free download) and found the
mumbai-central.com website. I bet he modified dozens of sites
within a couple of hours. >

Some questions:

1. Could an intrusion detection system [IDS] such as ISS RealSecure or
Tivoli Intrusion manager have helped?

2. Is it cost-effective to have an outside specialist perform vulnerability
checks as opposed to simply having a generic IDS?

3. What would entail an emergency response plan? Does it mean like
having a backup of critical files, a capacity to repair with the OS down,
a bug-hunter sw, a phone activating alert call to a live-maintained station?

With people hunting breaches with generic sw it sounds more like a
matter of "when" rather than "if."

Arya.








------------------------------------------------------------------------------
To Subscribe [Unsubscribe] send a blank message to 
        nukkad-list-request@mumbai-central.com 
with the word 'subscribe' ['unsubscribe'] (without quotes) in the Subject 
of your message.
The list is archived at  http://www.mumbai-central.com/nukkad/archive.html