SANS released its annual Top 20 list of Internet security vulnerabilities. According to SANS the list compiled by consensus of contributors from "government agencies in the UK, US, and Singapore; the leading security software vendors and consulting firms; the top university-based security programs; many other user organizations; and the SANS Institute. "
For Windows, the SANS list suggests that the most vulnerable areas are Web servers & Web services, the Workstation service, RAS, Microsoft SQL Server, Windows authentication, Web browsers, file sharing applications, LSAS exposures, mail clients, and instant messaging. Not much has changed, eh?
The top 20 vulnerabilities for Unix and Linux platforms are BIND DNS, Web servers, authentication, version control systems, mail transport services, SNMP, Open Secure Sockets Layer (SSL), misconfiguration of NIS/NFS, databases, and the kernel itself.
You can learn about the specifics of these areas of vulnerability by reading the Top 20 list at the SANS Web site.
End of Article
You must be a registered user or online subscriber to comment on this article. Please log on before posting a comment. Are you a new visitor?
Register now
Get Mark Minasi’s Windows Server 2008 Audio CDs "Windows expert, consultant and best-selling author Mark Minasi shows you if 2008 is right for you and, if so, how to get the most out of it!
Take Control of Your Email Optimize your email storage – Download this white paper to learn key how-to’s in email storage management.
Get Windows IT Pro To Go! The Windows IT Pro Magazine Master CD is a powerful combination of content and convenience. Order now, and save up to 25%--plus you’ll get online access to new articles each and every month! Subscribe today!
Register
