Great Circle Associates Firewalls
(October 1993)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: CERT Clearance Levels
From: reh @ cs . UMD . EDU (Richard Huddleston)
Date: Mon, 25 Oct 93 22:25:05 -0400
To: firewalls @ greatcircle . com

Jeez, I'm already sick to death of this thread.  What a good time to
add to it ;).

I'm sure many, if not most, of us enjoy some type of formal clearance
to work at our job sites.   You get a clearance (1) when you need one;
(2) when you seem to match the profile of someone who can be trusted
to see, hear, and know the types of things you're in a position to see,
hear and know.  Some clearances move with you, some don't. 

Well, I don't need to spell the rest of it out, do I?  An application
with sufficient penalties for lying -- real ones, that are enforced -- 
should provide sufficient clearance for getting enough information
to test for and remove a hole.  More information required means more
clearance methods, paid for by employer ( in most cases, with exceptions
for sufficiently small businesses ).  The clearance should not be a 
giveaway.  ( Yes, there are adminstrative and policy details left out;
this isn't a thesis. ) 

Consider it overhead for the policemen that serve the Information 
Superhighway: allocate tax dollars to fund and support the federal end.

Cheers,

Richard 



Indexed By Date Previous: Re: CERT and information
From: long-morrow @ CS . YALE . EDU (H Morrow Long)
Next: smail vs. sendmail
From: brian @ lloyd . com (Brian Lloyd)
Indexed By Thread Previous: Smail question, On the subject of sendmail...
From: Peter shipley <shipley @ merde . dis . org>
Next: smail vs. sendmail
From: brian @ lloyd . com (Brian Lloyd)

Google
 
Search Internet Search www.greatcircle.com