Hi all,
Let's try to maintain some perspective opposite all operating systems, their use facing the public networks, emerging criminal threats and the advancements in addressing both known and unknown threats...
What I mean is, each OS and all those behind them, have improved dramatically, and opposite the increased presence of threats. The RHN, for example, has evolved a great deal and offers those running Red Hat AS a fairly comprehensive source of patches and updates.
Similarly, Microsoft, who was first to support an integrated public patch management system, has evolved as well.
What we all seem to be forgetting is that business processes and commerce - e.g., the interchange of property across the public networks has provided an attractive enough target to criminals to justify their funding of exploit groups and the activities we have all seen with increasing regularity. It frankly shocks me that we spend so much time debating the efficacy of one system over another - when in fact, the public networks present the greatest example of a heterogeneous environment that has ever existed. Instead of un-helpful flaming, we should embrace scientific facts and assist all - regardless of technological preference, in securing all systems against criminal exploitation. We must accept that each of us is only as prosperous as the poorest amongst us.
Finally, looking at one system or another in isolation of its immediate environment is simply incomplete. We need a great deal more texture in our networks - particularly at the ISP's and we need some enforcement at that level. Clear differentions as to internal, and perimeter network segments needs to be address - even if the perimeter is limited to a single interface, which proxies both in and out-bound requests. The more intelligent applications filter based systems can do a very effective job of securing even the smallest of networks.
As I visit here, and to the very limited extent of my ability, I will try and present facts, suggest real-world solutions that are easy and affordable - and enjoin all to raise the level of discourse above that which serves only the criminals which threaten all of us. Thanks.
|