10 Anti-Hack Tips Businesses Can Use Today From Recourse Technologies.

Business Editors &High-tech Writers

PALO ALTO, Calif.--(BUSINESS WIRE)--Feb. 16, 2000

Recourse Technologies, Inc., today released 10 tips for Internet service provider and network administrators interested in protecting their systems from a variety of hacker attacks such as those that disrupted business at Yahoo.com, Buy.com, ZDNet, Amazon.com and several other high profile Web sites.

&uot;As we've seen this week, the Internet has quickly become an integral part of our daily lives. Thus it was very disturbing to see such popular sites unavailable due to a distributed denial of service attack. Unfortunately, no single security solution -- firewalls, intrusion detection, encryption -- will keep out all so-called hacker attacks,&uot; said Frank Huerta, president and CEO of Recourse Technologies, Inc., a leader in covert security software for networks. &uot;We are seeing the beginning of a new trend, and we believe copycat hackers are going to target even more sites with more complicated and complex attacks.&uot;

According to Huerta, &uot;Whether or not an attack is profitable for a hacker, it is costly for companies to recover and resume business. The costs can include added network audits, higher insurance premiums and lost customer confidence. Effective security involves a well-rounded strategy and many different approaches. No single solution is optimal,&uot; he explained.

Recourse Technologies recently released version 1.5 of ManTrap(TM). ManTrap is the first of a series of covert security tools for corporate network organizations. The company's founders, President and CEO Frank Huerta and CTO Michael Lyle, offer the following advice to strengthen a network's security. Companies that take all the following steps can significantly reduce the likelihood of their networks being compromised or &uot;owned&uot; by hackers.

       Ten Security Steps For Today's Networks

1.   Set up a perimeter security solution.

       Perimeter security, such as a firewall, is still the first line
     of defense for a network, and should be used for all connections
     from the outside world. Firewalls reduce access to the network
     and force attackers either to exploit the firewall or to attack
     by using permitted traffic access.

2.   Disable all unused services and assess all network protocols.

       Lack of familiarity with services installed &uot;by default&uot; can
     leave a network vulnerable to attack. Exploits often are used
     against typical novice configuration errors. Ensure that
     authentication and encryption are applied to all protocols that
     carry important information to and from the outside world.

3.   Log and review all traffic denied at the firewall.

       This can reveal suspicious activities that indicate the early
     stages of an attack, which can evolve into a security
     vulnerability. Also review any denied traffic originating from
     inside the network for evidence of attempted attacks or serious
     security incidents.

4.   Install security patches on hosts.

       Attackers can quickly identify or develop exploits against
     vulnerabilities in software products. Check with manufacturers
     for the frequent patches and updates that protect their products.

5.   Establish secure remote connections for the network.

       Many security breaches take advantage of weaknesses in remote
     access. For more secure remote connections to the network, use
     strong passwords and authentication, such as that provided by
     tokens and smart cards, a VPN, or private network with
     encryption.

6.   Use honeypots or decoy technology.

       New commercial products such as ManTrap(TM) from Recourse
     Technologies, Inc. help the organization understand the
     intentions of attackers and take action. This technology allows
     observation and monitoring of their attackers and their methods,
     gathering of valuable data, and even supports apprehension and
     prosecution -- all while the network remains secure.

7.   Guard the physical security of sensitive systems.

       If there is insufficient physical security guarding hardware
     containing mission-critical systems, then these systems are
     vulnerable to theft or malicious destruction on the premises,
     thus rendering all other security measures are futile.

8.   Review Web scripts, especially active server pages and cgi
     scripts, for security vulnerabilities.

       Developers of Web-server applications often meet business and
     technical objectives without including a security perspective. A
     review can help identify weaknesses that can be easily exploited
     -- for example, enabling attackers to deviate from the script's
     intended application.

9.   Learn about the latest exploits by monitoring incident-response
     or hacker-resource Web sites.

       Attackers tend to disseminate their activities to the hacker
     community at large. Staying aware of their progress leads to a
     better understanding of their methods, which can help companies
     head off attacks.

10.  Employ multiple layers of security.

       Any single solution can be compromised, given enough time.
     Multiple levels lessen the likelihood that an attack will be
     quick and easy for hackers. For example, using access-control
     lists on a router, a firewall, and a commercial honeypot
     application such as ManTrap (TM) from Recourse Technologies, Inc.
     provides multiple deterrents against attacks.

Why Covert Security?

Covert security involves confusing and exposing hackers, turning the tables on hackers, and enabling companies to gather information about attacks without the intruder knowing. Covert security also buys you time directly related to the risk of exposure. The more time a hacker has to attack your network, the greater the risk of its exposure. The less time that security personnel have to respond to an attack, the greater the possible damage.

About Recourse Technologies, Inc.

Recourse Technologies builds products to trap and track hackers. The company provides covert security software that enables businesses on the Internet to contain, control and track malicious computer attacks. Recourse Technologies, Inc. is headquartered in Palo Alto. For more information, please visit the Web site at http://www.recourse.com or contact Recourse Technologies by email or phone: [e-mail], 877/786-9633.