Re: Common operational misconceptions

[Chris Campbell <chris () ctcampbell com>]

This isn't so much a list of misconceptions that recent students have as a list of misconceptions that security 
management have…

On 15 Feb 2012, at 22:52, Rich Kulawiec wrote:

> ICMP is evil.
> Firewalls can be configured default-permit.
> Firewalls can be configured unidirectionally.
> Firewalls will solve our security issues.
> Antivirus will solve our security issues.
> IDS/IPS will solve our security issues.
> Audits and checklists will solve our security issues.
> Our network will never emit abuse or attacks.
> Our users can be trained.
> We must do something; this is something; let's do this.
> We can add security later.
> We're not a target.
> We don't need to read our logs.
> What logs?
>
> (with apologies to Marcus Ranum, from whom I've shamelessly
> cribbed several of these)
>
> ---rsk