Infoworld
July 21, 1997, pgs 77-80

To Catch a Thief ...

"By virtually all analyses, computer-related crime --
particularly hacking -- is on the rise." These offenses
are illegal and you have legal recourse provided that you
follow rules about how to prove your case.

THE MOST IMPORTANT WAY A COMPANY CAN PROTECT ITSELF

• Often, the people that can do the most damage are the
  company's own employees. "Careful screening of employees
  and then maintaining good cheer of everyone can go a long way."

• Have a management policy or plan in case an intrusion
  occurs that includes how you will contact law enforcement.

• While your system operators may not want to admit that
  they suffered an intrusion, be sure that they don't just close
  up the hole hope for no more intrusions.

• First, its a matter of public responsibility.

• Second, if the intruder sees no risk of getting stopped
  he or she will return for more fun at your expense.

• Third, hackers don't have to be smart anymore. They can
  and do download hacking programs from the Web so that they
  only have to point and click.

• Decide on your method of monitoring.

• Announce on your home page that your site is, or can be,
  monitored at any time.

• Preserve your audit logs of what has happened in their
  original condition, so as not to scare off law enforcement
  from pursuing your case.

• Ideally, store away the hard drive containing the original
  software that was hacked. This enables you to authenticate
  the evidence at the time of trial.