Security Question

id EAB21405
Sender: owner-midrange-l@midrange.com
Reply-To: MIDRANGE-L@midrange.com
Errors-To: list-errors@midrange.com
X-List-Name: Midrange Systems Mailing List (MIDRANGE-L@midrange.com)

The August issue of Infosec Outlook, which you can subscribe to from  https://
www.itaa.org/transact/2koutlooksub.htm. includes a list of steps to help
document crimes directed against computer systems so as to help law
enforcement nail the perpetrators all the way to jail, but I was wondering
about the general practicality of one of the reccommended steps in the AS/400
reality.

Quote

C.  If the incident is in progress, activate auditing software and consider
implementing a keystroke monitoring program. (Make sure the system log on
warning banner permits a monitoring program to be implemented.)

Unquote

Now I know from the kinds of software modifications that I have been doing
that this is not as easy as flipping a switch, or work with that job & take
one of IBM's menu options.  If is my understanding that Trigger Programs &
Journaling, neither of which I am using, are tied to individual files & can
do before/after images of what user touched, but only if we know in advance
what user might be going after.  We can crank up job log settings but every
one I have seen is just a string of cases of MONMSG might be needed.

There is also much discussion of the notion that there is no such thing as a
totally secure system (I disagree ... an AS/400 that is not connected to the
real world), but sooner or later we may be at risk, so what can an employee
who knows Master Security Officer password do, other than pulling plug on
suspect, when we have suspicion that something untowards is occurring?

For more info on the advice I am asking about, you might also check out: the
FBI's NIPC home page http://www.nipc.gov; the Information Technology
Association of America (ITAA) www.itaa.org; and the CERT® Coordination Center
(CERT/CC) www.cert.org at the Software Engineering Institute.

Al Macintyre  ©¿©
MIS Manager Green Screen Programmer & Computer Janitor of BPCS 405 CD Rel-02
running on AS/400 V4R3 http://www.cen-elec.com Central Industries of
Indiana--->Quality manufacturer of wire harnesses and electrical
sub-assemblies 

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---