report su report..

UPDATE (10/01/08): No, non ho niente di personale contro questo tipo di "prodotti", leggendolo posso dire che questo mi è piaciuto - per tanti motivi - molto più dei suoi simili/concorrenti. Anzi, a dir la verita', per il target a cui è rivolto penso sia anche uno dei migliori. Anche se, a dir la verita', dall'annuncio mi era sembrato davvero una bella cagata. :>

Anche Cisco entra nel mondo delle previsioni.

Dopo i famosissimi threat report Symantec, iDefense, $chipiunehapiunemetta, anche Cisco si è decisa di fare questi famosi PDF da dare al marketing/accounts per farsi belli con i clienti ed i tecnici dei loro clienti, che meticolosamente provvedono a stamparli e riusarli come carta da gabinetto. :>

E' alla sua prima versione, quindi si merita, per fiducia, di essere letto:

http://www.cisco.com/web/about/security/cspo/docs/Cisco2007Annual_Security_Report.pdf

Anche se dall'annuncio  non promette tanto bene:

Some of the noteworthy recommendations include:

• Conduct regular audits within organizations of attractive targets and evaluate the avenues that can be used to attack them. "Exploits are too often successful because of not following security basics: host-based intrusion prevention, patches and upgrades with security fixes, and regular audits," Stewart said.
  


• Understand the notion that threats follow usage patterns. "Where the majority goes, attackers will follow," Goddard said. "Every time a new application or device enters the fold, new threats will emerge."
  


• Change the mindset of employees, consumers and citizens who consider themselves innocent bystanders and empower them to become active influencers with shared ownership over security responsibilities. IT teams should help lead this charge, but it's not solely their problem.
  


• Make security education a priority. Businesses, security vendors, and government agencies need to invest in security education and awareness-building. This effort should include industry-wide collaboration among partners and competitors.
  


• Institutionalize IT security education by incorporating it into school curricula.
  


• Consider more than just performance when building a secure network. Focus on the network's ability to collaborate, inspect, adapt and resolve security issues end to end, from gateways and servers to desktops and mobile devices.
  


• Security vendors need to provide comprehensive security solutions that extend throughout the network infrastructure, application mix and data itself. 
  

Urca, davvero noteworthy!  

E mi raccomando: luci sempre accese, anche di giorno.