[svlug] Intrusion Detection and recovery SIG

[Rick Moen]

begin Bobby S. Wen quotation:

> I am trying to start a special interest group (SIG) for people
> interested in helping non-profit groups with intrusion detection and
> recovery.

These are parts of the picture (and you certainly need a reasonably
short name for the group, but...).  A more comprehensive picture:
prevention, hardening, detection, identification, interdiction,
counter-measure, recovery.

To quote my acquaintance who writes for LinuxWorld Online:

"Explicit security policies, security auditing, the design and testing
of backup systems, automatic and manual log analysis, handling of dialup
access, physical security for the network, the special problems posed by
laptop users, security training and documentation, and disaster recovery
and costing are necessary parts of such an effort."

http://www.linuxworld.com/linuxworld/lw-2000-08/lw-08-expo00-hacking.html
and thereabouts.

I'm unclear on the "helping non-profit groups" part.

-- 
Cheers,                   "Teach a man to make fire, and he will be warm 
Rick Moen                 for a day.  Set a man on fire, and he will be warm
rick at linuxmafia.com       for the rest of his life."   -- John A. Hrastar