re: "It's ok we're behind a firewall"

> "It's ok we're behind a firewall"

Well, depending on the issue, that may be a valid answer, particularly when qualified w/ other security mechanisms.

> 1. Still a large majority of computer crime (data
theft
> damage etc) is caused by people who have access to
get
> facts and figures to support this?

The CSI/FBI survey usually says this...but I'm not really convinced. Take into account the method of information gathering...it's a survey, rather than data collected from actual cases. Looking at the spate of worms that have far-reaching success (CR, Nimda, Slammer) one has to really look hard at the respondant's capability to accurately detect and then resolve security incidents.

However, the numbers are there, if you need them.

> 3. Firewalls can be breached or misconfigured ...

Most folks in the security arena understand this. And, of course, it's proven time and again.

> 4. Firewalls can be bypassed -

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

You're correct. That's why there needs to be a layered approach to security. I work for a small company, and we have A/V on the email server, as well as the desktops.

> Are there any sites out there with the facts and

If you're able to find anything, please post it in the lists. Most of what I've seen so far has been anecdotal at best. Unfortunately those kinds of specifics just don't seem to be made public...for more reasons than I'd like to go into.