Re: Security Question

< If the incident is in progress, activate auditing software and consider
<implementing a keystroke monitoring program. (Make sure the system log on
<warning banner permits a monitoring program to be implemented.)

I can see why a monitoring pgm could be useful, if it could format the data
in a meaningful way. Have to ask the guys on the MI list if one could
intercept all keyboard data, but my first guess would be a comm trace
(get everyone except twinax users). The Security Auditing allows you to
audit a user's activity. But you really need a tool to tie all this
together.
Has anyone heard of one for 400? They certainly exist for NT & probably
Unix. And it should be as easy as flipping the switch!

> There is also much discussion of the notion that there is no such thing as
a
> totally secure system (I disagree ... an AS/400 that is not connected to
the
> real world), but sooner or later we may be at risk, so what can an
employee
> who knows Master Security Officer password do, other than pulling plug on
> suspect, when we have suspicion that something untowards is occurring?
>


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---