NX Security participates in the SANS Top-20 Critical Internet Threats

The NX Security participated in the creation of the internationally renowned 'Top-20 Critical Internet Threats Research', the world's most significant study into vulnerabilities and exposures, headed up by the SANS Institute. This study brings together the finest minds across industry, government and academia to define and document the most critical of security threats - and provide expert guidance on the means of remediation.

NX Security's participation in the 2005 study is via its director of technology, Marcos Ferreira. As specialists in vulnerability assessment and ethical hacking, Marcos Ferreira were hand picked to join this exclusive forum that develops the 'Top-20'. Their experience and expertise in this field has helped greatly in the definition of the core threats facing organisations over the coming twelve months, as well as the means by which these organisation can address their exposures and manage risk across the enterprise.

SANS Top-20

The 'Top-20' is a consensus list of vulnerabilities that require immediate remediation. It is the result of a process that brought together dozens of leading security experts. They come from the most security-conscious government agencies in the UK, US, and Singapore; the leading security software vendors and consulting firms; the top university-based security programs; many other user organizations; and the SANS Institute.

This SANS Top-20 2004 is actually two Top Ten lists: the ten most commonly exploited vulnerable services in Windows and the ten most commonly exploited elements in UNIX and Linux environments. Although there are thousands of security incidents each year affecting these operating systems, the overwhelming majority of successful attacks target one or more of these twenty vulnerable services.

The SANS Top-20 is a living document. It includes step-by-step instructions and pointers to additional information useful for correcting the security flaws. We will update the list and the instructions as more critical threats and more current or convenient methods of protection are identified, and we welcome your input along the way. This is a community consensus document - your experience in fighting attackers and in eliminating the vulnerabilities can help others who come after you.

For more information: http://www.sans.org/top20


Olívia Bulla
MTb: MG09584JP