Think Like a Hacker

The "think like a hacker" philosophy was first espoused many years ago, and although it's still a valid approach to security, it's easier said than done.

In reality, most legitimate computer professionals don't possess the mores, mindset, or motivation of a serious hacker. It seems that no matter how many security courses we take, most of us simply don't think the same way that a hacker does. That's not to say that you should give up trying to understand the hacker culture.

The best way to get a feel for the world of hacking is to visit hacker sites. Fortunately, most hackers require peer recognition so they love to publicize the security holes they've found and the hacks they've made. You may not fully understand them, but at least by reading about the "attack du jour," you'll find out what hackers are doing to the systems you're trying to protect. The best starting point is the site hosted by "2600 The Hacker Quarterly," (http://www.2600.com/magazine/) which is also available in most bookstores.