>Someone breaks into your house and you notify them that
> you have a weapon or you point your gun at them... if the
> intruder starts to make an escape, you CANNOT chase them
> down and shoot them!!! And that is what the Strikebacks
> are all about... chasing down a potential intruder
> and "shooting" them and you CANNOT do that.

Your analogy is flawed. An attacking script/worm/whatever is not an intruder trying to escape, its an intruder that continues to attack and invade your home, regardless of how many guns you brandish to warn him off.

As such, the intruder should be shot.

Moreover, if a bank robber steals my car and uses it during a holdup, my car may get bullet holes shot in it from the police or private security guards. Yet, I have no legal recourse to be compensated from the security guards for the damage to my "stolen vehicle." I must seek compensation from the thief whole stole the car in the first place.

Now, replace thief with hacker, and car with server, bank with database, and security guard with SysAdmin. The picture becomes very clear, and quite obvious.


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/134/17758#17758