[unisog] looking for defintion

[vijay at ericavijay.net]

Hi Ch,

I assume you are talking IT related the list being Unisog. There are few 
good definition of proactive and reactive security services.

Proactive Security:  Getting an assessment or snapshot of your environment, 
its governance model and planning to fix the gaps.
Activities Example:
    Code Assurance Testing
    Penetration Testing
    Risk & Vuln Assessment
    Governancec & Compliance Testing

Reactive Security: Watching the current active environment for threats, 
exploits and compromises - alerting or automating action
Activities Example:
    Log Monitoring and Event Correlation
    Security Device Management (Automated)
    DOS and DDOS Mitigation
    Data Loss Prevention

Regards
Vijay

----- Original Message ----- 
From: "Christoph Sprongl" <ch at it-austria.net>
To: "UNIversity Security Operations Group" <unisog at lists.dshield.org>
Sent: Thursday, May 22, 2008 2:30 PM
Subject: [unisog] looking for defintion


> Hi,
>
> sorry to bother you but i am looking for definitions of proactive and
> reactive ?
> Anyone have a good idea or can point me to? - i have looked in several
> sources but could not yet find a good one...
>
> ch
>
>
> _______________________________________________
> unisog mailing list
> unisog at lists.dshield.org
> https://lists.sans.org/mailman/listinfo/unisog