From: Greg Kelley (gkelleyvestigeltd.com)
Date: Thu Jul 21 2005 - 11:09:09 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> And I choose to take an educated approach,
> understanding the purpose of the system, it's
> exposures, and what I can do to protect it.

I wholeheartedly agree, Harlan. I believe that this above comment is
one of the points you have been making throughout this thread.

So, can you state that without a doubt, a true web server, or server in
general, set up properly, maintained properly, would be immune from a
virus? Maybe, but you cannot state that the machine will always be
maintained properly. No one can. Why? Because accidents happen.

Why does one carry auto insurance (forget uninsured motorist, roadside
assistance, etc.)? Because accidents happen. Even the safest of
drivers can have a lapse of judgement, become distracted, etc.
Insurance protects you from that. Insurance also protects you from that
tire blowout which causes you to swerve into another vehicle. It
protects from accidents and the unknown.

A good line of defense in a computer infrastructure should do the same.
Attempt to protect not just from weaknesses, but also from accidents and
the unknown. Of course a business case can be made for every line of
defense weighing the cost with the benefits. But at the minimal cost
for AV software, I believe any benefit, including just piece of mind,
would be worth that cost.

Greg Kelley, EnCE
Vestige Digital Investigations
Computer Forensics | Electronic Discovery | Corporate Surety
46 Public Square, Ste 220
Medina, OH 44256
(330)721-1205 x5432
(330)721-1206 Fax
http://www.vestigeltd.com

---------------------------------------------------------------------------
---------------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]