566.txt

来自「snort入侵检测规则文件2.4 Snort是众所周知的网络入侵检测工具」· 文本 代码 · 共 64 行

Rule:

--
Sid:
566

--
Summary:
This event is generated when network traffic indicating the use of an
application or service that may violate a corporate security policy.

--
Impact:
This may be a violation of corporate policy since some applications can
be used to bypass security measures designed to restrict the flow of
corporate information to destinations external to the corporation. In
some instances this event may indicate behavior contrary to best
security practices.

--
Detailed Information:
This event may indicate a violation of corporate policy. It may also
indicate the use of services or applications that may be the antithesis
of best security practices.

--
Affected Systems:
	All systems

--
Attack Scenarios:
Violation of corporate security policy can manifest serious risk to
company assets.

--
Ease of Attack:
Not applicable

--
False Positives:
None known.

--
False Negatives:
None known.

--
Corrective Action:
Ensure adherence to best security practices and strict adherence to
corporate policy

--
Contributors:
Sourcefire Research Team
Brian Caswell <[e-mail]>
Nigel Houghton <[e-mail]>

--
Additional References:
Symantec PC Anywhere Home Page
http://www.symantec.com/pcanywhere/Consumer/

--