Las "20 vulnerabilidades más críticas" del año 2006
SANS Institute acaba de publicar por septimo año consecutivo su TOP 20 de vulnerabilidades más comunes.
El informe muy completo se divide en las siguientes areas:
Operating Systems
W1. Internet Explorer
W2. Windows Libraries
W3. Microsoft Office
W4. Windows Services
W5. Windows Configuration Weaknesses
M1. Mac OS X
U1. UNIX Configuration Weaknesses
Cross-Platform Applications
C1 Web Applications
C2. Database Software
C3. P2P File Sharing Applications
C4 Instant Messaging
C5. Media Players
C6. DNS Servers
C7. Backup Software
C8. Security, Enterprise, and Directory Management Servers
Network Devices
N1. VoIP Servers and Phones
N2. Network and Other Devices Common Configuration Weaknesses
Security Policy and Personnel
H1. Excessive User Rights and Unauthorized Devices
H2. Users (Phishing/Spear Phishing)
Special Section
Z1. Zero Day Attacks and Prevention Strategies
Fuente: http://www.sans.org/top20/
____
El informe muy completo se divide en las siguientes areas:
Operating Systems
W1. Internet Explorer
W2. Windows Libraries
W3. Microsoft Office
W4. Windows Services
W5. Windows Configuration Weaknesses
M1. Mac OS X
U1. UNIX Configuration Weaknesses
Cross-Platform Applications
C1 Web Applications
C2. Database Software
C3. P2P File Sharing Applications
C4 Instant Messaging
C5. Media Players
C6. DNS Servers
C7. Backup Software
C8. Security, Enterprise, and Directory Management Servers
Network Devices
N1. VoIP Servers and Phones
N2. Network and Other Devices Common Configuration Weaknesses
Security Policy and Personnel
H1. Excessive User Rights and Unauthorized Devices
H2. Users (Phishing/Spear Phishing)
Special Section
Z1. Zero Day Attacks and Prevention Strategies
Fuente: http://www.sans.org/top20/
____
Hi, This is a great report from the Computer security company. After analyzing few thousands of scenarios they have made this. Good work SANS! Keep on with that good work folks! . These security vulnerabilities help one to defense the systems and networks in a better way and as the saying goes that "prevention is better than cure". For more information on such topic go through the site:http://www.eccouncil.org/certification/ec-council_certified_security_analyst.aspx
ResponderBorrar