RE: Security Question

["Richard Jackson" <richardjackson@xxxxxxxxxxxxxxxxxx>]

Peek ... pretty close

Richard Jackson
mailto:richardjackson@richardjackson.net
http://www.richardjacksonltd.com
Voice: 1 (303) 808-8058
Fax:   1 (303) 663-4325

-----Original Message-----
From: owner-midrange-l@midrange.com
[mailto:owner-midrange-l@midrange.com]On Behalf Of Jim Franz
Sent: Monday, August 21, 2000 8:49 PM
To: MIDRANGE-L@midrange.com
Subject: Re: Security Question


< If the incident is in progress, activate auditing software and consider
<implementing a keystroke monitoring program. (Make sure the system log on
<warning banner permits a monitoring program to be implemented.)

I can see why a monitoring pgm could be useful, if it could format the data
in a meaningful way. Have to ask the guys on the MI list if one could
intercept all keyboard data, but my first guess would be a comm trace
(get everyone except twinax users). The Security Auditing allows you to
audit a user's activity. But you really need a tool to tie all this
together.
Has anyone heard of one for 400? They certainly exist for NT & probably
Unix. And it should be as easy as flipping the switch!

> There is also much discussion of the notion that there is no such thing as
a
> totally secure system (I disagree ... an AS/400 that is not connected to
the
> real world), but sooner or later we may be at risk, so what can an
employee
> who knows Master Security Officer password do, other than pulling plug on
> suspect, when we have suspicion that something untowards is occurring?
>


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---