Front cover - IBM Redbooks

8 Lotus Security Handbook
► Work with vendors to improve the security of as-shipped products
The CERT/CC is part of the Networked Systems Survivability (NSS) Program at
the Software Engineering Institute (SEI), Carnegie Mellon University. The
primary goal of the NSS Program is to ensure that appropriate technology and
systems management practices are used to resist attacks on networked systems
and to limit damage and ensure continuity of critical services in spite of
successful attacks.
For a number of years now, the CERT/CC has kept a record of security incidents
and security vulnerabilities. The complete library of these reports can be found at
the following URL:
http://www.cert.org/annual_rpts/index.html
As computers, networks, and related technologies have evolved, so have the
methods and tools of the attackers, getting more and more sophisticated and
more numerous.
The figures for the last year tabulated are sobering. From January through
December 2002, the CERT/CC received 204,841 e-mail messages and more
than 880 hotline calls reporting computer security incidents or requesting
information. Figure 1-1 on page 9 illustrates the number of security incidents
tabulated from 1988 through 2001 and the trend these figures represent.