Re: hello

From: Valdis.Kletnieksat_private
Date: Fri Apr 05 2002 - 20:59:24 PST

Next message: Whitecell Security Systems: "(WSS-Advisories-02003) PHPBB BBcode Process Vulnerability"

Previous message: xzchen: "hello"
In reply to: xzchen: "hello"
Next in thread: Oliver Petruzel: "RE: hello"
Reply: Oliver Petruzel: "RE: hello"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Sat, 06 Apr 2002 10:16:19 +0800, xzchen <xzchenat_private>  said:

> Hi,I am engaged in the vulnerability assessment. Now I am lack of
> the statistic results about the exploting incidents of some
> vulnerabilities.How can I get some statistic data about the
> exploting incidents of some vulnerabilities? Please provide me some
> reference. Thank you.

Vulnerability assessments are usually made on a specific
program/site/network.  As a result, simply throwing statistics like
"18 million hosts were infected with Nimda" doesn't tell you
*ANYTHING* about whether your target is vulnerable to anything, Nimda
or otherwise.  On the other hand, *IF* your network contains Linux
systems, Dave Dittrich's estimate of how long an unpatched Linux
system survives may be useful information.

-- 
				Valdis Kletnieks
				Computer Systems Senior Engineer
				Virginia Tech

application/pgp-signature attachment: stored

Next message: Whitecell Security Systems: "(WSS-Advisories-02003) PHPBB BBcode Process Vulnerability"
Previous message: xzchen: "hello"
In reply to: xzchen: "hello"
Next in thread: Oliver Petruzel: "RE: hello"
Reply: Oliver Petruzel: "RE: hello"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sat Apr 06 2002 - 09:16:22 PST