Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Management
[Top] [All Lists]

Re: Guidelines For System Administrators?

Subject: Re: Guidelines For System Administrators?
Date: Mon, 31 Oct 2005 15:56:53 +0800
Hi,

Thanks to all that replied. Will be checking and reading through them =D

-kw-
----- Original Message -----
From: "Jose Nazario" <jose@monkey.org>
To: security-management@securityfocus.com
Subject: Re: Guidelines For System Administrators?
Date: Wed, 26 Oct 2005 09:38:34 -0400 (EDT)


some links i gathered up some months ago covering admin and security
ethics ...

     *      The University of Georgia maintains a computer security 
ethics quiz.
(http://www.uga.edu/~compsec/quiz/quiz25.html) While it is not an official
policy document from the University, it does reflect their stance on
things.

     *      The Stanford University Philosophy department maintains a small
overview of Computer Ethics
(http://plato.stanford.edu/entries/ethics-computer/). This is an overview
document, but it does contain some discussion of security ethics. It is
more academic in nature and is not designed for younger students (ie
pre-college students).

     *      SANS has a brief statement for computer security professionals
(along with administrators) which describes the basic code of conduct
expected of professionals in this area
(http://www.sans.org/resources/ethics.php).

     *      LURHQ has an interesting page on Security Ethics and Security
Reearch (http://www.lurhq.com/ethics.html). They cover a few cases and
describe the ethical problems posed there.

     *      The Heroic Hacker, from Erik Brunvand at the University of Utah, 
is
an interesting document
(http://www.cs.utah.edu/~elb/folklore/afs-paper/afs-paper.html), but
probably not for someone very new to the world of responsibility and
ethics.

     *      A small module at Iowa State University covers the basics of 
ethics
and poses a few small questions which can be used to exercise the lessons
learned (http://www.cs.utah.edu/~elb/folklore/afs-paper/afs-paper.html).

     *      SAGE maintains a code of ethics page
(http://sageweb.sage.org/ethics.mm) which is similar to the one at SANS.

     *      The ACM maintains a nice set of guidelines, as well, which are far
more complete than the SAGE or SANS ones
(http://onlineethics.org/codes/ACMcode.html).


________
jose nazario, ph.d.                   jose@monkey.org
http://monkey.org/~jose/              http://infosecdaily.net/
                                      http://www.wormblog.com/

-- 
_______________________________________________
Check out the latest SMS services @ http://www.linuxmail.org
This allows you to send and receive SMS through your mailbox.

Powered by Outblaze

<Prev in Thread] Current Thread [Next in Thread>
  • Re: Guidelines For System Administrators?, Lim Kah Wee <=