Information Technology Reference
In-Depth Information
...*terces*...
Worm
Time Bomb
...2A7465726365732A...
Sniffer
IDS
Logic Bomb
Herring
Hoax
Spyware
Virus
SPAM
Figure 8.4
Heuristic icon and character samples.
Cartoon icons and characters make the message more memorable to the heuristic
thinker. Figure 8.4 contains examples to use in a heuristic-focused policy dissemina-
tion campaign. Cartoons or similar iconic figures representing viruses, logic bombs,
stereotypical good guys (white hats), and bad guys (black hats) help the message stick.
For example,
spyware
as a word has less impact to the average employee than a picture
of a spy-like figure peeking out from the computer screen.
8.6.2.2 Commentary
The difference between a builder and an architect is when the builder is given
the blueprints, he goes off and builds the house. When the architect receives the
blueprints, he asks questions about your lifestyle, likes, and dislikes. he architect
addresses who you are, what you want, why you want it, and how you live, includ-
ing an assessment of social psychology and social dynamics to the objective of
providing a better solution.
Chapter 9 provides details with respect to security standards. Security stan-
dards describe what to use to implement and enforce policy. Policy implementa-
tion is the practical, effective fulfillment of the policy. IA policy implementation
may include the acquisition or development of IA services and mechanisms. Pol-
icy enforcement is the ability to detect policy violations and to act upon those
violations with corrective measures or sanctions. IA policy enforcement includes
monitoring and responding to violations of policy. As an analogy, consider legis-
lation. here are many laws on the topics and a well-deined process to propose,
debate, refine, and ratify laws. These laws are implemented in so far as they have
been ratified and now exist. Moreover, there exists a judicial system to enforce
laws. However, the existence of a law does not guarantee its enforcement. Law
enforcement officers may not be aware of the law, or they may not understand its
application in day-to-day activities. Moreover, the judicial system may not have
precedent to base decisions on, and therefore is hesitant to enforce the law. Like-
