Security Log

12.06.2006
Security bookshelf

Advanced Host Intrusion Prevention With CSA, by Chad Sullivan, Jeff Asher and Paul Mauvais (Cisco Press, 2006).

This book was a good fit for me, given my involvement with Cisco IP telephony; the CSA agent is installed on some of the Cisco appliances. The authors take the reader from threat to solution, with detailed instructions on planning, implementation, configuration and maintenance. They provide a lot of detail for the various phases of implementation, though I would have liked to see more on tuning the policy and incident response.

USB 'Logic Bomber' goes on trial in N.J.

A former USB PaineWebber Inc. systems administrator accused of unleashing a "logic bomb" on the investment company's computer network went on trial in U.S. District Court in Newark, N.J., last week. Roger Duronio, 63, is charged with securities, computer and mail fraud, according to The Star-Ledger in Newark. The indictment states that Duronio was infuriated that his year-end bonus had been slashed. He quit his job in February 2002 and bought about US$20,000 worth of put-option contracts that would have increased in value if USB's share price fell from $46 to $40 in 11 days. He allegedly compromised the network, doing damage estimated at $3.1 million, to ensure that the share price would fall. Duronio lost all the money he invested.