Week 12 Blog Entry

Write about ways that penetration analysts limit the risk they pose to internal systems.

Ways that penetration analysts limit the risk they pose to internal systems:
- A penetration test, which offers an invalueable and compelling way to establish a baseline assessment of security as seen from outside the boundaries the organisation's network. Properly done these tests can show vulnerabilities that may exist and network penetrations thet may be possible.
(http://www.isss.net)
- Perform tests during off peak times, when systems are not in use. Doing this means that even if the systems have slow or if its performance is hampered, the impact will not be huge.
(http://corpinfosec.blogspot.com/2009_11_01_archive.html)

Looking at News stories related to computer vulnerabilities.

Network Security Magazine. com (http://www.network-security-magazine.com)
Network Security Threats
- How Advanced Persistent threats bypass your network security.
Advanced Persistent Threats have been attacking hundreds of companies around the world. It is reported in the article that "Advanced Persistent Threats(ATP's) are sophiticated forms of cyber attacks through which hackers mine for sensitive corporate data over the long term". The ATP's are not easily purged from the system and usually take days to erase.

This description of an ATP is very accurate and in line with what is written by researchers.