Re: draft on evidence protection

[Tom Killalea <tomk@neart.org>]

Hi Espen,

While there are valuable examples of how to do things the right way in
Stoll's book, I'd like to present an approach that is more scientific in
this draft.  I'm also hoping to keep it as short as possible.  

By the way, the Cuckoo's Egg is a reference in the 'Site Security Handbook' 
(rfc2196) though, and I believe that's one of the most widely read RFCs.  
It's also referred to in rfc1135, rfc1175, rfc1244, rfc1432, rfc1704 and
rfc2235.

Thanks,
Tom.

On Tue, 28 Mar 2000, Espen Torseth wrote:

>Maybe there should be a refrence to "The Cuckoo's Egg : Tracking a Spy
>Through the Maze of
>Computer Espionage" by Clifford Stoll. It is a great story and illustrates
>in an excellent
>way the need for detailed documentation of the evidence gatehring and
>tracing.
>
>Espen 

-- 
Tom Killalea   (206)  266-2196    neart.org
               tomk@neart.org