InformationWeek

Infamous Hacker Offers Tips

Even from prison, Petersen sees holes

Even from his jail cell at the Los Angeles Metropolitan Detention Center, convicted hacker and former FBI informant Justin Tanner Petersen is well aware of the media's growing preoccupation with Internet security. As someone who has successfully accessed corporate systems without invitation, Petersen is willing to offer advice on how to safeguard corporations from Internet security problems.

Petersen says technology managers would be well advised to read Internet security advisories released via electronic mail by the C omputer Emergency Response Team (CERT), a government-funded group that safeguards the Internet. The advisories include recommended software patches for known security holes on the Net.

Petersen recommends the regular use of alpha-numeric passwords, rather than letter-only passwords. Alpha-numeric passwords are much harder to crack. Also, Petersen recommends organizations invest in back up software that can restore systems if a hacker strikes.

"Communication with employees is also key," says Petersen. "They should know not to answer questions posed by unfamiliar callers." Finally, someone--not just a system administrator--should be assigned to corporate security, says Petersen. "I'd also hire an outside security consultant-but not a hacker."