Saturday, May 29, 2010

Famous People comment on The Buddha and His Teachings

SOURCE: http://web.singnet.com.sg/~sidneys/praises.htm

In point of age, therefore, most other creeds are youthful compared with this venerable religion, which has in it the eternity of a universal hope, the immortality of a boundless love, an indestructible element of faith in final good, and the proudest assertion ever made of human freedom.

Sir Edwin Arnold (1832-1904) British poet, Journalist and Poet Laureate of England

__________________________________________________________________

The teachings of the Indian Prince has indeed nothing to dread from science . . . Words would fail me if I attempted to express how necessary I think knowledge of this high faith and philosophy is to leaven the materialism of the West . . . It is, at all events, a truth which influenced not only the mightiest thinkers of Greece and Rome, but also the beginnings of Christian teachings - which it antedated by five or six hundred years. It may well claim kindred with all the great faiths, persecuting and opposing none which differ with it, and this for reasons which are easily seen in the teachings themselves. In relation to its noble and scientific austerity no words are needed.

L. Adam Beck
An American Traveler and author

__________________________________________________________________

To the Christian, Love is the highest virtue; to the Buddhist, Wisdom, for they hold that ignorance is the root of all evil. Love, all the same, ranks high ......Tolerance and loving kindness, both based on Buddhist wisdom, are perhaps the chief reason why the middle way of Gotama has come down through 2500 years.

Sir Charles Bell KCIE, CMG ( 1870-1945) 
British Diplomat and Lexicographer

__________________________________________________________________

Lord Buddha's message of truth, peace, compassion and tolerance is as relevant as it was many centuries ago. The passage of time has made its flame shine with greater luminosity. Rampant materialism and the pursuit of individual success at all costs have eroded the ties of brotherhood and community. In these circumstances, it is necessary to remember and propagate the message of compassion of Lord Buddha so that hatred can be replaced by love, strife by peace and confrontation by co-operation.

Dr. Amadou-Mahtar M 'Bow 
Director - General, UNESCO

__________________________________________________________________

The only one of the great religions which makes any appeal to me is Buddhism; and that, as I understand it, is rather a philosophy of the world, and a way of life for the elite founded upon it, than a religion in the ordinary sense of the word.

C D Broad (1887-1971) British Philosopher

__________________________________________________________________

The recent evolution of man certainly begins with the advancing development of the hand, and the selection of a brain, which is particularly adept at manipulating the hand. We feel the pleasure of that in our actions, so that for the artist the hand remains a major symbol; the hand of the Buddha, for instance, giving man the gift of humanity in a gesture of calm, the gift of fearlessness.

J.Bronowski (1908-1974)

American Author and Philosopher of Science

__________________________________________________________________

Whether the Westerner who first approaches the Buddha's teachings be accustomed to modern scientific or to Christian terminology, he should always bear in mind that the Buddha was not interested in the existence or non-existence of a Supreme Being or any other abstract philosophical proposition. He was interested only in the Way, the practical way, by which suffering may be ended, both here and hereafter.

Marie B. Byles (1900-1979) 
Australian author and mountaineer

__________________________________________________________________

Buddha's message of compassion and devotion to the service of humanity is more relevant today than at any other time in history. Peace, understanding and a vision that transcends purely national boundaries are imperatives of our insecure nuclear age.

Javier Perez De Cuellar

Peruvian Diplomat from 1982 and Secretary General of United Nation

__________________________________________________________________

It cannot be denied that there is a real beauty of an Oriental kind in the various expressions which the Buddhists use; and that there was real grounds for the enthusiasm which gave them birth. Never in the history of the world had such a scheme been put forth, so free from any superhuman agency, so independent of so even antagonistic to the belief in a soul, the belief in God, and the hope of a future life...

Whether these be right or wrong, it was a turning point in the religious history of man when a reformer, full of the most earnest moral purpose and trained in all the intellectual culture of his time, put forth deliberately, and with a knowledge of the opposing views the doctrine of salvation to be found here, in this life, in an inward change of heart, to be brought about by perseverance in a mere system of self culture and self control.

Buddhist or non-Buddhist, I have examined every one of the great religious systems, of the world, in none of them I have found anything to surpass, in beauty and comprehensiveness, the Noble Eightfold Path and the Four Truths of the Buddha.

Prof. T. W. Rhys Davids (1843-1922) B ritish Orientalist lexicographer and

the first person to hold a chair in Comparative Religion in a British university

__________________________________________________________________

Like the other teachers of his time, Buddha' taught through conversation, lecturers and parables. Since it never occurred to him, any more than Socrates or Christ, to put his doctrine into writing, he summarised it in sutras (threads) designed to prompt the memory.

As preserved for us in the remembrance of his followers these discourses unconsciously portray for us the first distinct character of India's history: a man of strong will, authoritative and proud, but of gentle manner and speech, and of infinite benevolence. He claimed enlightenment but not inspiration; he never pretended that a god was speaking through him. In controversy he was more patient and considerate than any other of the great teachers of mankind.

Like Lao-tze and Christ he wished to return good for evil, love for hate; and he remained silent under misunderstanding and abuse . . . Unlike most saints, Buddha has a sense of humour, and knew that metaphysics without laughter is immodesty.

Will Durant (1885-1 981) 
American Historian and Pulitzer Prize Winner

__________________________________________________________________

The individual feels the nothingness of human desires and aims and the sublimity and marvellous order which reveal themselves both in nature and in the world of thought. He looks upon individual existence as a sort of prison and wants to experience the universe as a single significant whole, the beginnings of cosmic religious feeling already appear in early stages of development - e.g. in many of the Psalms of David and in some of the Prophets.

Buddhism, as we have learnt from the wonderful writings of Schopenhauer especially, contains much stronger elements of it. The religion of the future will he a cosmic religion. It should transcend a personal God and avoid dogmas and theology. Covering both the natural and the spiritual, it should he based on a religious sense arising from the experience of all things, natural and spiritual and a meaningful unity. Buddhism answers this description. If there is any religion that would cope with modern scientific needs it would be Buddhism.

Albert Einstein (1879-1955) German physicist, mathematician.

Winner of the Nobel Prize

__________________________________________________________________

But Eliot's attraction to Buddhism was not simply a philosophical one. Nirvana is extinction* the annihilation of desire, the freedom from attachments - and there was, as can he seen from his poetry, an over-riding desire in the young Eliot to be free.

The absolutism of Buddhism is quite as relentless as anything he had found in Maurras and, although he was perhaps attracted to it for much the same reasons, the Eastern religion had more romantic affiliations for someone who wished to break free from the familial bonds which otherwise held him.

Peter Ackrayd's comments on English poet T. S. Eliot (1888-1965)

*The extinction of greed, hatred and delusion.

__________________________________________________________________

At the back of the shrine outside the temple, grows the sacred tree under which, or rather the ancestor of which, Buddha sat. Squares of gold leaf have been stuck on to the trunk and boughs. The temple, together with several acres of garden full of trees and flowers and votive stones, chapels, hells, and statues, lies on a deep courtyard below the level of the surrounding country. The view when one drives up and sees everything suddenly from the edge of the embankment is, as the books say, 'not easily forgotten'. There can't be anything like it in the world.

E.M. Forster (1879-1970) British novelist

__________________________________________________________________

Man gave up the illusion of a fatherly God as a parental helper - but he gave up also the true aims of all great humanistic religions: overcoming the limitations of an egotistical self, achieving love, objectivity, and humility and respecting life so that the aim of life is living itself, and man becomes what he potentially is. These were the aims of the great Western religions, as they were the aims of the great Eastern religions.

The East, however, was not burdened with the concept of a transcendent father - saviour in which the monotheistic religions expressed their longings. Taoism and Buddhism had a rationality and realism superior to that of Western religions. They could see man realistically and objectively, having nobody but the 'awakened' ones to guide him, and being able to he guided because each man has within himself the capacity to awake and be enlightened. This is precisely the reason why Eastern religious thought, Taoism and Buddhism - and their blending in Zen Buddhism* assume such importance for the West today.

Zen Buddhism helps man to find an answer to the question of his existence, an answer which is essentially the same as that given in the Judaeo-Christian tradition, and yet which does not contradict the rationality, realism, and independence which are modern man's precious achievements. Paradoxically, Eastern religious thought turns out to be more congenial to Western rational thought than does Western religious thought itself.

Erich Fromm (1900-1980) 
German American Psychoanalyst and Social Philosopher

* The Japanese meditation tradition

__________________________________________________________________

There may be a great significance in the fact that Pythagoras in Greece and the Buddha in the Orient occur at the same time in the sixth century B.C. Both are powerfully, perceptively thinking and acting human individuals who, coming out of a past in which only mystically ordained kings counted and humans were omniexpendable pawns, produced mathematical tools and philosophis forever thereafter to employ.

R.Buckminster Fuller (1895-1984)
American Inventor, Social Engineer and Philosopher

__________________________________________________________________

I have no hesitation in declaring that I owe a great deal to the inspiration that I have derived from the life of the Enlightenment One. Asia has a message for the whole world, if only it would live up to it. There is the imprint of Buddhistic influence on the whole of Asia, which includes India, China, Japan, Burma, Ceylon, and the Malay States. For Asia to be not for Asia but for the whole world, it has to re-learn the message of the Buddha and deliver it to the whole world. His love, his boundless love went out as much to the lower animal, to the lowest life as to human beings. And he insisted upon purity of life.

Mahama Gandhi ( 1869-1948)
Indian Thinker and Apostle of Non Violence

__________________________________________________________________

It was when I was up at Oxford in the early 1970's that I became interested in Buddhism. My life was full of confusion and distress of every kind, and I found in Buddhist philosophy a way of thought that enthralled me by its calm and radical analysis of desire, its rejection of all the self-dramatisiting intensities by which I lived, and its promise of a possible strong and unsentimental sincerity.

Andrew Harvey British author, poet and Fellow of All Souls College, Oxford

__________________________________________________________________

I left India and returned to Colombo, where I was the guest of a Singhalese student I knew in Perth. They were Buddhists, their house was in the grounds of a temple, and the atmosphere of the household was very peaceful and unbelievably gentle. I talked a lot about Buddhism with them, and they took me up to a temple in the hills, in Kandy, where I met the monks and talked to a very old abbot, who explained more about Buddhism to me. found Buddhism fascinating. Their concept that you progress towards the Ineffable through a number of existences seemed to me much more intellectually satisfying than the Christian belief that you come just once and are cast into circumstances maybe of great wealth or of great moment, but that you come to God or don't come to God on the basis of that one life. The logical attraction of Buddhism after the devastating experience of India was a further part of my breaking down. I was never on the point of embracing Buddhism but I found, and still find, it infinitely more satisfying than the Judeo-Christian philosophy.

Robert J. Hawke Rhodes Scholar, 
Trade Union Leader from 1983and Prime Minister of Australia

__________________________________________________________________

Now in this realm Buddha's speeches are a source and mine of quite unparalleled richness and depth. As soon as we cease to regard Buddha's teachings simply intellectually and acquiesce with a certain sympathy in the age-old Eastern concept of unity, if we allow Buddha to speak to us as vision, as image, as the awakened one, the perfect one, we find him, almost independently of the philosophic content and dogmatic kernel of his teachings, a great prototype of mankind. Whoever attentively reads a small number of the countless speeches of Buddha is soon aware of harmony in them, a quietude of soul, a smiling transcendence, a totally unshakeable firmness, but also invariable kindness, endless patience. As ways and means to the attainment of this holy quietude of soul, the speeches are full of advice, precepts, hints.

The intellectual content of Buddha's teaching is only half his work, the other half is his life, his life as lived, as labour accomplished and action carried out. A training, a spiritual self training of the highest order was accomplished and is taught here, a training about which unthinking people who talk about "quietism" and "Hindu dreaminess" and the like in connection with Buddha have no conception; they deny him the cardinal Western virtue of activity. Instead Buddha accomplished a training for himself and his pupils, exercised a discipline, set up a goal, and produced results before which even the genuine heroes of European action can only feel awe.

Herman Hesse (1877-1962) 
German author and winner of the Nobel Prize

__________________________________________________________________

The more I studied satipathana*, the more impressed I became with it as a system of mind training. It is in line with our Western scientific attitude of mind in that it is unprejudiced, objective and analytical. It relies on personal, direct experience, and not on anyone else's ideas or opinions. It is exceedingly simple and makes use of 'bare attention' basically as simple as a sustained 'ah look' but within a carefully chosen and disciplined system. It therefore explores all premature judgements, all talking 'about it and about,' all arguments, discussions and such waste of time as we in the West are inclined to be fond of. In fact, it gets you out of the rut and bondage of yourself, your prejudices, your clichés, your blindness and your self-opinionatedness, to set you free to see and prove a real world .

Dr E. Graham Howe MB. BS. DPM. 
Eminent British Physician

* Buddhist meditation.

__________________________________________________________________

The way of Buddhism is Middle Way between all extremes. This is no weak compromise, but a sweet reasonableness which avoids fanaticism and laziness with equal care, and marches onward without that haste which brings its own reaction, but without ceasing. The Buddha called it the Noble Eightfold Path to Nirvana, and it may be regarded as the noblest course of spiritual training yet presented, in such a simple form, to man. Buddhism is neither pessimistic nor 'escapist'. It is a system of thought, a religion, a spiritual science and a way of life which is reasonable, practical and all-embracing. For 2,500 years it has satisfied the spiritual needs of nearly one third of mankind. It appeals to those in search of truth because it has no dogmas, satisfies the reason and the heart alike, insists on self-reliance coupled with tolerance for other points of view, embraces science, religion, philosophy, psychology, mysticism, ethics and art, and points to man alone as the creator of his present life and sole designer of his destiny

.Justice Christmas Humphreys (1901-1983) 
Eminent British Judge

__________________________________________________________________

Among the early Buddhists, the metaphysical theory was neither affirmed or denied, but simply ignored as being meaningless and unnecessary. Their concern was with the immediate experience, which, because of its consequences for life, came to be known as 'liberation' or 'enlightenment'. The Buddha and his disciples of the southern school seem to have applied to the problems of religion that 'operational philosophy' which contemporary scientific thinkers have begun to apply to the natural sciences. The modern conception of man's intellectual relationship to the universe was anticipated by the Buddhist doctrine that desire is the source of illusion.

To the extent that one has overcome desire, a mind is free from illusion. This is true not only of the man of science, but also the artist and the philosopher. Only the disinterested mind can transcend sense and pass beyond the boundaries of animal or average-sensual human life. Perfect non-attachment demands of those who aspire to it, not only compassion and charity, but also the intelligence that perceives the general implications of particular acts, that sees the individual being within the system of social and cosmic relations of which he is but a part. In this respect, it seems to me, Buddhism shows itself decidedly superior to Christianity.

In the Buddhist ethic, stupidity, or unawareness, ranks as one of the principal sins. At the same time, people are warned that they must take their share of responsibility for the social order in which they find themselves. One of the branches of the Eightfold Path is said to be 'right means of livelihood', the Buddhist is expected to refrain from engaging in such socially harmful occupations as soldiering, or the manufacture of arms or intoxicating drugs.

Aldous Huxley (1894-1963) 
British author, Playwright and thinker

__________________________________________________________________

It is a remarkable indication of the subtlety of Indian speculation that Gautama should have seen deeper than the greatest of modern idealists. The tendency of enlightened thought of today all the world over is not towards theology but philosophy and psychology. The bark of theological dualism is drifting into danger. The fundamental principles of evolution and monism are being accepted by the thoughtful.

Prof. Julian Huxley (1887-1975) British author, 
Zoologist and Director General of UNESCO

__________________________________________________________________

I am ignorant of Buddhism and speak under correction, and merely in order the better to describe my general point of view; but as apprehend the Buddhistic doctrine of karma, I agree in principle with that.

William James (I842-I9I0) 
American philosopher and psychologis

__________________________________________________________________

When a modern western psychologist reads the Pali Nikayas*, he again finds passages which he recognizes as belonging to his field and are concerned with typical psychological problems. Perception, imagination and thinking are described and the idea of psychological causality is developed, although in very vague terms. Behaviour and consciousness are explained as dynamic processes, governed by needs. There are the rudiments of an understanding of unconscious processes. We find interesting descriptions of different personality types. And the literature is full of advice on how to change the conscious processes evidently based on careful observation and experimentation.

Dr Rure C. A. Johnson M.A. D. Phil Swedish psychologist and 
research psychologist for the Swedish National Defence

__________________________________________________________________

As a student of comparative religions, I believe that Buddhism is the most perfect one the world has even seen. The philosophy of the theory of evolution and the law of karma were far superior to any other creed. It was neither the history of religion nor the study of philosophy that first drew me to the world of Buddhist thought but my professional interest as a doctor. My task was to teat psychic suffering and it was this that impelled me to become acquainted with the views and methods of that great teacher of humanity, whose principal theme was the chain of suffering, old age, sickness and death.

Dr C.C. Jung (1875-1961)
Swiss psychologist Founder of the Jungian school of psychology

* Buddhist scriptures

__________________________________________________________________

Paul couples love with faith and hope, and his conception of love involves faith and hope: "Love," he says, "believes all things, hopes all things." The love I mean does not believe all things and hope all things. It survives disillusionment and persists in despair. Love is not love that ceases without hope or faith. As long as faith and hope support it, it is hardly more than puppy love. That love is pleasant is a fashionable myth, or, to be more charitable about it, an exception. The Buddha knew that love brings "hurt and misery, suffering, grief and despair"; and he advised detachment. The love I consider a virtue is not a blind love of the lovers or the trusting, hopeful love of Paul, but the love that knows what the Buddha knew and still loves, with open eyes.

Prof. Walter Kaufmann American philosopher and author

__________________________________________________________________

He read widely and deeply in Buddhist text, translated sutras from French, and even wrote a biography of the Buddha. But at the root of his absorption in Buddhism was the fact that he felt it offered him direct philosophical consolation for the disappointment in his life. . . Jack embraced the first law of Buddhism above all others, the statement that "All life is suffering" . . It was as if the words had been written for him.

Ann Charter comments on American author and poet Jack Kerouac (1922-1969)

__________________________________________________________________

The idea of unity-in-diversity can be followed all the way back to the Pythagorean 'Harmony of the Sphere' and the Hippocratic's 'sympathy of all things: 'there is one common flow, one common breathing, all things are in sympathy'. The doctrine that everything in the universe hangs together partly by mechanical causes but mainly by hidden affinities (which also accounts for apparent coincidences), provides not only the foundation for sympathetic magic, astrology and alchemy: it also runs as a leit-motif through the teachings of Taoism and Buddhism, the neo-Platonists, and the philosophers of the early Renaissance.

Arthur Koestler (1905-1983) 
Hungarian novelist and journalist

__________________________________________________________________

If I knew the Buddha would be speaking here tomorrow, nothing in the world could stop me from going to listen to him. And I would follow him to the very end.

J.Krishnamuri Indian philosopher (l895-1986 )

__________________________________________________________________

The Indian, the Aztec, old Mexico! All that fascinates me and has fascinated me for years, there is glamour and magic for me. Not Buddha. Buddha is so finished and perfected and fulfilled and "'volender" and without new possibilities - to me I mean.

D.H. Lawrence (1885-1930)British novelist

__________________________________________________________________

Today science is challenging the finite quality of the human brain, a brain consisting of some 10,000 million electrically stimulated cells programmed with the instincts of our long history and receptive to new notions whether true or false. The aggregate of these cells provides our ever-changing personality and their partial removal by surgery or altered rhythm by shock treatment changes our character. By such crude methods, aggression can be turned into fear, hatred to affection - how much better that they should be changed by appreciation of the realities that the philosophy of Buddha has placed in our hands.

William Mac Quilty British Award winning film maker, 
Traveller and Fellow of The Royal Geographical Society

__________________________________________________________________

The message of the Buddha is a message of joy. He found a treasure and he wants us to follow the path that leads us to the treasure. He tells man that he is in deep darkness, but he also tells him that there is a path that leads to light. He wants us to arise from a life of dreams into a higher life where man loves and does not hate, where a man helps and does not hurt. His appeal is universal, because he appeals to reason and to the universal is us all: It is you who must make the effort. The Great of the past only show the way.' He achieved a superior harmony of vision and wisdom by placing spiritual truth on the crucial test of experience; and only experience can satisfy the mind of modern man. He wants us to watch and be awake and he wants us to seek and to find.

Juan Mascan Spanish Academic and 
Educationalist, Lecturer at Cambridge University

__________________________________________________________________

I have so often tried to isolate the quality of "Zen" * which attracted me so powerfully to its literature and later to the practice of zazen #. But since the essence of Zen might well be what one teacher called the moment-by-moment awakening of mind, there is little that may sensibly be said about it without succumbing to that breathless, mystery-ridden prose that drives so many sincere aspirants in the other direction. In zazen, one may hope ~ penetrate the ringing stillness of the universal mind.

Peter Mathiessen American Novelist, Naturalist and Explorer.

Winner of The National Book Award in 1979

* The Japanese meditation tradition.

__________________________________________________________________

Maugham's interest in mysticism and Eastern philosophy is not a sudden development of his later life. Although his early questioning of Christianity culminated in the atheism represented in Philip Carey, he continued his examination of the religions of the East and his enquiries into mysticism. 'Faith' a short story published in 1899' considers sympathetically the dilemma of a young monk who loses the ability to believe in God. 'The Painted Veil' treated in however a superficial manner, the serenity of the belief in 'The Way'. In the 'Gentlemen in the Parlour', Maugham discusses the philosophy of Buddha, and he confessed to finding considerable attraction in the belief in the transmigration of souls . . . Because of the impact which the 'Razor's Edge' made in 1944, it has generally been overlooked that in the 'Narrow Corner', Maugham had already treated in considerable depth the philosophy of Indian religion. In this understated serious novel there is extensive discussion of Buddhism, and the progress of the story is a movement in the direction of that belief by the central figure.

R. L. Calder's comments On the works of English novelist W. Somerset Maugham (1874-1965)

__________________________________________________________________

Buddhism is much less a matter of organized and institutional orthodoxy than a state of mind. Buddhism does not aim directly at theological salvation but a total clarification of consciousness. It is not so much a way of worshipping as a way of being. Exterior cultural accretions are much less important than they may seem, and the Buddhist cultural awareness is endowed with mercury like formlessness, which erodes the statistical eye of the Western scholar.

Father Thomas Merton (1915-1968)
American Catholic Priest, Author and Social Crtics

__________________________________________________________________

Of all the great religious teachers of the world, none has incarnated and lived the idea that ultimate reality is beyond the grasp of the ordinary mind with such purity and concentration as the Buddha. This, in part, explains why the Buddha's discourses say nothing about the existence of a Supreme Being, for example, or about immortality . . Its strategy of negation has misled many Westerners into thinking Buddhism is pessimistic and anti-life. Some have even thought of Nirvana, the ultimate goal of Buddhist discipline, as a sort of spiritual suicide. Nothing could be further from the truth and, in fact, there is no religion which has a higher estimation of human possibility.

Prof. Jacob Needleman Scholar,
Author and Professor for philosophy at San Francisco State College

__________________________________________________________________

Whenever one thinks of the Buddha, one inevitably thinks of His great teaching; and I often feel that, perhaps, if we think more of that basic teaching of the avoidance of hatred and violence, we may be nearer the solution to our problem. In this world of storm and strife, hatred and violence, the message of the Buddha shines like a radiant sun: Perhaps at no time was that message more needed than in this world of the atomic and hydrogen bombs . . . Let us remember that immortal message and try to fashion our thoughts and actions in the light of that teaching . . . and help a little in prompting right thinking and right action. . . . If any question has to be considered, it has to be considered peacefully and democratically in the way taught by the Buddha.

Jawaharlal Nehru (1889-1964) 
Indian Prime Minister

__________________________________________________________________

Here it is grasped that one must not hate even evil, that one must not oppose it, that one not hate even oneself; that one should not merely acquiesce in the suffering that such a way of lie entails, that one should live entirely in positive feelings, that one should take the side of one's opponent in word and deed, that and through a supersfetation of the peaceable, good natured conciliatory, helpful ad loving states one impoverishes the soil in this standpoint is possible only when no moral fanaticism prevails, i.e. when evil is hated, not for its own sake, but only because it opens the way to states that are harmful to us ( unrest, work, care, entanglements, dependence).

This is a Buddhist standpoint : here is sin is not hated, there the concept in lacjking. Buddhism is hundred times more realistic than other religions. It has entered upon the inheritance of objectively and coolly putting up with problems. It came to life after several hundred years of philosophical development. The notion of God is done away with as soon as it appears, prayer is out of the question. So is asceticism. No categorical imperative. No coercion at all, not even within the monastic community. Hence it also does not challenge to fight against those of different faiths. its teaching turns against nothing so impressively as against the feeling of revengefulness, animosity and resentment.

Frederick Nietszche (1884-1900) 
German philosopher

__________________________________________________________________

If we ask, for instance, whether the position of the electron remains the same, we must say 'no'; if we ask whether the electron's position changes with time, we must say 'no'; if we ask whether the electron is at rest, we must say 'no'; if we ask whether it is in motion, we must say 'no'. The Buddha has given such answers when interrogated as to the conditions of a man's self after his death; but they are not familiar answers for the tradition of seventeenth and eighteenth century science.

J Robert Oppenheimer ( 1904-1967)
American Physician

__________________________________________________________________

Anyone from a king to a barber who wished to listen to the Buddha's teachings, or follow him in his missionary wanderings, or join the Sangha, the formal fellowship of Buddhist disciples, was free to do so. Even women, after some hesitation were admitted to the Sangha, whose establishment is often counted as one of the Buddha's most practical achievements, in large measure responsible for the eventual spread and continuity of Buddhist doctrine in the Asian world. The founding of an Order appears also to illustrate still further the Buddha's psychological acumen, for though he taught that each human being must trend the path to "awakening" or "deliverance" alone, he also realized what sustainment there could be in daily association with others working towards a common goal. Of the establishment of the Buddhist Sangha, Arnold Toynbee has said that it was a greater social achievement than the founding of the Platonist academy in Greece.

Nancy Wilson Ross (1901-1986) 
American Journalist, War Correspondent and Author.

__________________________________________________________________

Of the great religions of history I prefer Buddhism, especially in its earliest forms, because it has had the smallest element of persecution. Buddhism is a combination of both speculative and scientific philosophy. It advocates the Scientific Method and pursues that to a finality that may be called Rationalistic. In it are to be found answers to such question of interest as "What is mind and matter? Of them which is of great importance? Is the universe moving towards a goal?

What is man's position? Is there living that is noble?" It takes up where science cannot lead because of the limitations of the latter's instruments. Its conquests are those of the mind. I cannot myself feel that either in the matter of wisdom or in the matter of virtue Christ stands quite as high as some people known to history. I think I should put Buddha and Socrates above him in those respects.

Bertrand Russell (1872-1970) British Mathematician, Philosopher, 
Author and Social Critic,

__________________________________________________________________

We find the doctrine of metempsychosis, springing from the earliest and noblest ages of the human race, always spread abroad in the earth as the belief of the great majority of mankind, nay, really as the teachings of all religions with the exception of that of the Jews and the two which have preceded from it: in the most subtle form, however, and coming nearest to the truth, as has already been mentioned, in Buddhism. It almost seems that, as the oldest languages are the most perfect so also are the oldest religions. If I were to take the results of my philosophy as a yardstick of the truth, I would concede to Buddhism the pre-eminence of all religions of the world

Arthur Schopenhauer (1788-1860)
German philosopher

__________________________________________________________________

While the materialist is mainly interested in goods, the Buddhist is mainly interested in liberation. But Buddhism is 'The Middle Way' and therefore in no way antagonistic to physical well-being. It is not wealth that stands in the way of liberation but the attachment to wealth; not the enjoyment of pleasurable things but the craving for them.

The keynote of Buddhist economics, therefore, is simplicity and non-violence. From an economist's point of view, the marvel of the Buddhist way of life is the utter rationality of its pattern amazingly small means leading to extraordinarily satisfactory results.

It is in the light of both immediate experience and long term prospects that the study of Buddhism economics could be recommended even to those who believe that economic growth is more important than any spiritual or religous values.

For it not a question of choosing between "modern growth" and "traditional stagnation". It is a question of finding the right path of development, theMiddle Way between materialist heedlessness and traditonalist immobility, in short, of finding 'Right Livelihood'.

Dr E. F. Schumacher, CBE. (1911-1977) 
British Rhodes Scholar, Economist, Journalist and 
Economic Adviser to The National Coal Board from 1950-1970

__________________________________________________________________

He gave expression to truths of everlasting value and advanced the ethics not of India alone but of humanity. Buddha was one of the greatest ethical men of genius ever bestowed upon the world.

Albert Schweitzer (1875-1 965)French Scholar, Theologian and Philospher, 
Winner of The Nobel Prize.

__________________________________________________________________

Buddhism, better than most religions, seems to have adapted to modern life. Many considering it to be, among other things, not only a method of self discovery but a source of ideas for social orientation without equal in the West.

Lucien Stryk American author, poet and
Winner of Isaac Rosenbaum Poetry Award

__________________________________________________________________

Buddhism was the first spiritual force, known to us in history, which drew close together such a large number of races separated by most difficult barriers of distance, by difference of language and custom, by various degrees and divergent types of civilization. It had its motive power, neither in international commerce, nor in empire building, nor in a scientific curiosity, nor in a migrative impulse to occupy fresh territory. It was a purely disinterested effort to help mankind forward to its final goal.

Rabindranath Tagore (1861-1941) 
Indian poet and educationalist. 
Winner of The Nobel Prize.


The Most Important Leadership Quality for CEOs? Creativity

The Most Important Leadership Quality for CEOs? Creativity

idea

For CEOs, creativity is now the most important leadership quality for success in business, outweighing even integrity and global thinking, according to a new study by IBM. The study is the largest known sample of one-on-one CEO interviews, with over 1,500 corporate heads and public sector leaders across 60 nations and 33 industries polled on what drives them in managing their companies in today's world.

Fast Company's annual list of the 100 Most Creative People in Business [1] just took on a whole new depth. And this year's list will be revealed later this month.

Steven Tomasco, a manager at IBM Global Business Services, expressed surprise at this key finding, saying that it is "very interesting that coming off the worst economic conditions they'd ever seen, [CEOs] didn't fall back on management discipline, existing best practices, rigor, or operations. In fact, they [did] just the opposite."

About 60% of CEOs polled cited creativity as the most important leadership quality, compared with 52% for integrity and 35% for global thinking. Creative leaders are also more prepared to break with the status quo of industry, enterprise and revenue models, and they are 81% more likely to rate innovation as a "crucial capability."

creativity poll

Other key findings showed a large disparity between views of North American CEOs and those from other territories.

For example, in North America, 65% of CEOs think integrity is a top quality for tomorrow's leaders, whereas only 29-48% of CEOs in other territories view it as such.

Ironically, while company leaders in North America will bring more integrity to the job, they also expect far more regulation than foreign heads -- both presumably reactions to negative public perception and heavy government intervention following the recession. A full 87% anticipate greater government oversight and regulation over the next five years -- only 70% of CEOs in Europe hold this opinion, and 50% and 53% in Japan and China, respectively. Meanwhile, nearly double the amount of CEOs in China view global thinking as a top leadership quality, compared with Europe and North America.

government global thinking

The area of focus the regions can all agree on is customer focus: 88% of all CEOs, and an astounding 95% of standout leaders, believe getting closer to the customer is the top business strategy over the next five years.

IBM will be holding a Web dialogue with experts to discuss the study's findings. You can find a link for the Web cast here [2], and a schedule as follows:

  • Creative Leaders Webcast - 8am-9am EDT
  • Connected Customers Webcast - 1pm-2pm EDT
  • Dexterous Organizations - 8pm-9pm EDT

What do you think of the findings? Is creativity the most important leadership quality today? Don't forget to sign up for our Most Creative People in Business conference [3], which is sure to provide excellent insight on the topic.

[Sidebar image via LitReview [4]]


Tuesday, July 14, 2009

Encryption Algorithms

Encryption algorithms are commonly used in computer communications. Usually they are used to provide secure transfers. If an algorithm is used in a transfer, the file is first translated into a seemingly meaningless cipher text and then transferred in this configuration; the receiving computer uses a key to translate the cipher into its original form. So if the message or file is intercepted before it reaches the receiving computer it is in an unusable (or encrypted) form.

Here are some commonly used algorithms:

DES/3DES or TripleDES
This is an encryption algorithm called Data Encryption Standard that was first used by the U.S. Government in the late 70's. It is commonly used in ATM machines (to encrypt PINs) and is utilized in UNIX password encryption. Triple DES or 3DES has replaced the older versions as a more secure method of encryption, as it encrypts data three times and uses a different key for at least one of the versions.

Blowfish
Blowfish is a symmetric block cipher that is unpatented and free to use. It was developed by Bruce Schneier and introduced in 1993.

AES
Advanced Encryption Standard or Rijndael; it uses the Rijndael block cipher approved by the National Institute of Standards and Technology (NIST). AES was originated by cryptographers Joan Daemen and Vincent Rijmen and replaced DES as the U.S. Government encryption technique in 2000.

Twofish
Twofish is a block cipher designed by Counterpane Labs. It was one of the five Advanced Encryption Standard (AES) finalists and is unpatented and open source.

IDEA
This encryption algorithm was used in Pretty Good Privacy (PGP) Version 2 and is an optional algorithm in OpenPGP. IDEA features 64–bit blocks with a 128–bit key.

MD5
MD5 was developed by Professor Ronald Riverst and was used to create digital signatures. It is a one–way hash function and intended for 32–bit machines. It replaced the MD4 algorithm.

SHA–1
SHA–1 is a hashing algorithm similar to MD5, yet SHA–1 may replace MD5 since it offers more security

HMAC
This is a hashing method similar to MD5 and SHA–1, sometimes referred to as HMAC–MD5 and HMAC–SHA1.

RSA Security
RC4– RC4 is a variable key–size stream cipher based on the use of a random permutation.
RC5– This is a parameterized algorithm with a variable block, key size and number of rounds.
RC6– This an evolution of RC5, it is also a parameterized algorithm that has variable block, key and a number of rounds. This algorithm has integer multiplication and 4–bit working registers.
 
References
MyCrypto.net. (n.d.). Encryption algorithms. Retrieved October 25, 2006, from http://www.mycrypto.net/encryption/crypto_algorithms.html

Webopedia. (2006). What is encryption algorithm? – A Word Definition From the Webopedia Computer Dictionary. Jupitermedia Corporation. Retrieved October 25, 2006, from http://www.webopedia.com/TERM/E/encryption_algorithm.html

Monday, July 6, 2009

The ISO27001 Certification Process

ISO/IEC 27001, part of the growing ISO/IEC 27000 family of standards, is an Information Security Management System (ISMS) standard published in October 2005 by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). Its full name is ISO/IEC 27001:2005 - Information technology -- Security techniques -- Information security management systems -- Requirements but it is commonly known as "ISO 27001".

ISO/IEC 27001 formally specifies a management system that is intended to bring information security under explicit management control. Being a formal specification means that it mandates specific requirements. Organizations that claim to have adopted ISO/IEC 27001 can therefore be formally audited and certified compliant with the standard (more below).
Most organizations have a number of information security controls. Without an ISMS however, the controls tend to be somewhat disorganized and disjointed, having been implemented often as point solutions to specific situations or simply as a matter of convention. Maturity models typically refer to this stage as "ad hoc". The security controls in operation typically address certain aspects of IT or data security, specifically, leaving non-IT information assets (such as paperwork and proprietary knowledge) less well protected on the whole. Business continuity planning and physical security, for examples, may be managed quite independently of IT or information security while Human Resources practices may make little reference to the need to define and assign information security roles and responsibilities throughout the organization.

ISO/IEC 27001 requires that management:
  • Systematically examines the organization's information security risks, taking account of the threats, vulnerabilities and impacts;
  • Designs and implements a coherent and comprehensive suite of information security controls and/or other forms of risk treatment (such as risk avoidance or risk transfer) to address those risks that it deems unacceptable; and
  • Adopts an overarching management process to ensure that the information security controls continue to meet the organization's information security needs on an ongoing basis.
While other sets of information security controls may potentially be used within an ISO/IEC 27001 ISMS as well as, or even instead of, ISO/IEC 27002 (the Code of Practice for Information Security Management), these two standards are normally used together in practice. Annex A to ISO/IEC 27001 succinctly lists the information security controls from ISO/IEC 27002, while ISO/IEC 27002 provides additional information and implementation advice on the controls.
Organizations that implement a suite of information security controls in accordance with ISO/IEC 27002 are likely simultaneously to meet many of the requirements of ISO/IEC 27001, but may lack some of the overarching management system elements. The converse is also true, in other words an ISO/IEC 27001 compliance certificate provides assurance that the management system for information security is in place, but says little about the absolute state of information security within the organization. Technical security controls such as antivirus and firewalls are not normally audited in ISO/IEC 27001 certification audits: the organization is essentially presumed to have adopted all necessary information security controls since the overall ISMS is in place and is deemed adequate by satisfying the requirements of ISO/IEC 27001. Furthermore, management determines the scope of the ISMS for certification purposes and may limit it to, say, a single business unit or location. The ISO/IEC 27001 certificate does not necessarily mean the remainder of the organization, outside the scoped area, has an adequate approach to information security management.

Other standards in the ISO/IEC 27000 family of standards provide additional guidance on certain aspects of designing, implementing and operating an ISMS, for example on information security risk management (ISO/IEC 27005).


Certification

ISMSs may be certified compliant with ISO/IEC 27001 by a number of Accredited Registrars worldwide. Certification against any of the recognized national variants of ISO/IEC 27001 (e.g. JIS Q 27001, the Japanese version) by an accredited certification body is functionally equivalent to certification against ISO/IEC 27001 itself.

In some countries, the bodies which verify conformity of management systems to specified standards are called "certification bodies", in others they are known as "registration bodies", "assessment and registration bodies", "certification/ registration bodies", and sometimes "registrars".

The ISO/IEC 27001 certification[1], like other ISO management system certifications, usually involves a three-stage audit process:
  • Stage 1 is a preliminary, informal review of the ISMS, for example checking the existence and completeness of key documentation such as the organization's information security policy, Statement of Applicability (SoA) and Risk Treatment Plan (RTP). This stage serves to familiarize the auditors with the organization and vice versa.
  • Stage 2 is a more detailed and formal compliance audit, independently testing the ISMS against the requirements specified in ISO/IEC 27001. The auditors will seek evidence to confirm that the management system has been properly designed and implemented, and is in fact in operation (for example by confirming that a security committee or similar management body meets regularly to oversee the ISMS). Certification audits are usually conducted by ISO/IEC 27001 Lead Auditors. Passing this stage results in the ISMS being certified compliant with ISO/IEC 27001.
  • Stage 3 involves follow-up reviews or audits to confirm that the organization remains in compliance with the standard. Certification maintenance requires periodic re-assessment audits to confirm that the ISMS continues to operate as specified and intended. These should happen at least annually but (by agreement with management) are often conducted more frequently, particularly while the ISMS is still maturing.

Sunday, July 5, 2009

Top 10 Worst Computer Worms of All Time

The Internet is an Internet lover's paradise, a gamer's haven, a business's lifeline, and a hacker's playground. Over the past two decades, hundreds of worms have devastated the infrastructure of millions of computers around the world, causing billions of dollars of damage-and the life of the worm is far from over. Let's take a look at the last 20 years to see which of these worms have stood out from among the rest.

10. Jerusalem (also known as BlackBox)
Discovered in 1987, Jerusalem is one of the earliest worms. It is also one of the most commonly known viruses, deleting files that are executed on each Friday the 13th. Its name comes from the city in which it was first detected, the city of Jerusalem.
The worm, which infects DOS, increases the file size of all files run within DOS (with the exception of COMMAND.COM).
Jerusalem is a variant of the Suriv virus, which also deletes files at random periods during the year (April Fool's Day and/or Friday the 13th depending on the variant). The Jerusalem worm inspired a host of similar worms that grow by a specified file size when executed. Another variant, Frère, plays the song Frère Jacques on the 13th day of the month.
While Jerusalem and its relatives were quite common in their day, they became less of a threat when Windows was introduced.

9. Michelangelo
In 1991, thousands of machines running MS-DOS were hit by a new worm, one which was scheduled to be activated on the artist Michelangelo's birthday (March 6th). On that day, the virus would overwrite the hard disk or change the master boot record of infected hosts.
When the worm came to mainstream attention, mass hysteria reigned and millions of computers were believed to be at risk. After March 6th, however, it was realized that the damage was minimal. Only 10,000 to 20,000 cases of data loss were reported.
Ironically, however, because of the media hype, the period before March 6, 1992 became known as "Michelangelo Madness," with users buying anti-virus software in droves, some for the very first time. In a way, the "madness" led many people to prepare for the outbreak and helped minimize the actual damage caused by the worm.

8. Storm Worm
One of the newest worms to hit the Internet was the Storm Worm, which debuted in January of 2007. Its name came from a widely circulated email about the Kyrill weather storm in Europe, and its subject was "230 dead as storm batters Europe." The virus first hit on January 19th, and three days later, the virus accounted for 8% of all infected machines.
If your computer was infected by the Storm Worm, your machine became part of a large botnet. The botnet acted to perform automated tasks that ranged from gathering data on the host machine, to DDOSing websites, to sending infected emails to others. As of September of this year, an estimated 1 million to 10 million computers were still part of this botnet, and each of these computers was infected by one of the 1.2 billion emails sent from the infected hosts.

Storm Worm is a difficult worm to track down because the botnet is decentralized and the computers that are part of the botnet are consistently being updated with the fast flux DNS technique. Consequently, it has been difficult for infected machines to be isolated and cleaned.

7. Sobig
In 2003, millions of computers were infected with the Sobig worm and its variants. The worm was disguised as a benign email. The attachment was often a *.pif or *.scr file that would infect any host if downloaded and executed. Sobig-infected hosts would then activate their own SMTP host, gathering email addresses and continually propagating through additional messages.
Sobig depended heavily on public websites to execute additional stages of the virus. Fortunately, in earlier cases, these sites were shut down after the discovery of the worm. Later, when Geocities was found to be the primary hosting point for Sobig variants, the worm would instead communicate with cable modems that were hacked that would later serve as another stage in the worm's execution.
The result? Sobig infected approximately 500,000 computers worldwide and cost as much as $1 billion in lost productivity.

6. MSBlast
The summer of 2003 wasn't much easier for those building anti-virus definitions or those at businesses or academic institutions. In July of that year, Microsoft announced a vulnerability within Windows. A month later, that vulnerability was exploited. This worm was called MSBlast, a name created by the worm's author, and it included a personal message from the author to Bill Gates. The note read, "billy gates why do you make this possible? Stop making money and fix your software!!"
When MSBlast hit, it installed a TFTP (Trivial File Transfer Protocol) server and downloaded code onto the infected host. Within several hours of its discovery, it had hit nearly 7,000 computers. Six months later, over 25 million hosts were known to be infected. The Windows Blaster Worm Removal Tool was finally launched by Microsoft in January of 2004 to remove traces of the worm.
A 19-year-old from Minnesota, Jeffrey Lee Parson, was arrested and sentenced to 18 months in prison with 10 months of community service after launching a variant of the MSBlast worm that affected nearly 50,000 computers.

5. Melissa
Want porn but don't have any? In 1999, hungry and curious minds downloaded a file called List.DOC in the alt.sex Usenet discussion group, assuming that they were getting free access to over 80 pornographic websites. Little did they know that the file within was responsible for mass-mailing thousands of recipients and shutting down nearly the entire Internet.
You get what you pay for.
Melissa spread through Microsoft Word 97 and Word 2000, mass emailing the first 50 entries from a user's address book in Outlook 97/98 when the document was opened. The Melissa worm randomly inserted quotes from The Simpsons TV show into documents on the host computer and deleted critical Windows files.
The Melissa worm caused $1 billion in damages. Melissa's creator, a David Smith from New Jersey, named the worm after a lap dancer he met while vacationing in Florida. Smith was imprisoned for 20 months and fined $5,000.

4. Code Red
Friday the 13th was a bad day in July of 2001; it was the day Code Red was released. The worm took advantage of a buffer overflow vulnerability in Microsoft IIS servers and would self-replicate by exploiting the same vulnerability in other Microsoft IIS machines. Web servers infected by the Code Red worm would display the following message:
HELLO! Welcome to http://www.worm.com! Hacked By Chinese!
After 20 to 27 days, infected machines would attempt to launch a denial of service on many IP addresses, including the IP address of www.whitehouse.gov.
Code Red and its successor, Code Red II, are known as two of the most expensive worms in Internet history, with damages estimated at $2 billion and at a rate of $200 million in damages per day.

3. Nimda
In the fall of 2001, Nimda ("admin" spelled backwards) infected a variety of Microsoft machines very rapidly through an email exploit. Nimda spread by finding email addresses in .html files located in the user's web cache folder and by looking at the user's email contacts as retrieved by the MAPI service. The consequences were heavy: all web related files were appended with Javascript that allowed further propagation of the worm, users' drives were shared without their consent, and "Guest" user accounts with Administrator privileges were created and enabled.
A market research firm estimated that Nimda caused $530 million in damages after only one week of propagation.
Several months later, reports indicated that Nimda was still a threat.

2. ILOVEYOU (also known as VBS/Loveletter or Love Bug Worm)
You may have gotten an email in 2000 with the subject line "ILOVEYOU." If you deleted it, you were safe from one of the most costly worms in computer history. The attachment in that email, a file called LOVE-LETTER-FOR-YOU.TXT.vbs, started a worm that spread like wildfire by accessing email addresses found in users' Outlook contact lists. Unsuspecting recipients, believing the email to be benign, would execute the document only to have most of their files overwritten.
The net result was an estimated $5.5 billion to $8.7 billion in damages. Ten percent of all Internet-connected computers were hit.
Onel A. de Guzman, the creator of the virus and a resident of the Philippines, had all charges dropped against him for creating the worm because there were no laws at the time prohibiting the creation of computer worms. Since then, the government of the Philippines has laid out penalties for cybercrime that include imprisonment for 6 months to 3 years and a fine of at least 100,000 pesos (USD $2000).

1. Morris Worm (also known as the Great Worm)
How big is the Internet, you ask? In 1988, Cornell University student named Robert Tappan Morris launched 99 lines of code in his quest for the answer. While his intentions were not malicious, there were bugs in his code that caused affected hosts to encounter a plethora of stability problems that effectively made these systems unusable. The result was increased load averages on over 6,000 UNIX machines across the country which caused between $10,000,000 and $100,000,000 of damage.

FIREWALLS

As you begin to learn the essentials of computer and network security you will encounter many new terms: encryption, port, Trojan and more. Firewall will be a term that will appear again and again. So, what is a firewall?
A firewall is basically the first line of defense for your network. The basic purpose of a firewall is to keep uninvited guests from browsing your network. A firewall can be a hardware device or a software application and generally is placed at the perimeter of the network to act as the gatekeeper for all incoming and outgoing traffic.

A firewall allows you to establish certain rules to determine what traffic should be allowed in or out of your private network. Depending on the type of firewall implemented you could restrict access to only certain IP addresses or domain names, or you can block certain types of traffic by blocking the TCP/IP ports they use.

There are basically four mechanisms used by firewalls to restrict traffic. One device or application may use more than one of these in conjunction with each other to provide more in-depth protection. The four mechanisms are packet-filtering, circuit-level gateway, proxy server and application gateway.

A packet filter intercepts all traffic to and from the network and evaluates it against the rules you provide. Typically the packet filter can assess the source IP address, source port, destination IP address and destination port. It is these criteria that you can filter on- allowing or disallowing traffic from certain IP addresses or on certain ports.
A circuit-level gateway blocks all incoming traffic to any host but itself. Internally, the client machines run software to allow them to establish a connection with the circuit-level gateway machine. To the outside world it appears that all communication from your internal network is actually originating from the circuit-level gateway.

A proxy server is generally put in place to boost performance of the network, but can act as a sort of firewall as well. Proxy servers also hide your internal addresses as well so that all communications appear to originate from the proxy server itself. A proxy server will cache pages that have been requested. If User A goes to Yahoo.com the proxy server actually sends the request to Yahoo.com and retrieves the web page. If User B then connects to Yahoo.com the proxy server just sends the information it already retrieved for User A so it is returned much faster than having to get it from Yahoo.com again. You can configure a proxy server to block access to certain web sites and filter certain port traffic to protect your internal network.

An application gateway is essentially another sort of proxy server. The internal client first establishes a connection with the application gateway. The application gateway determines if the connection should be allowed or not and then establishes a connection with the destination computer. All communications go through two connections- client to application gateway and application gateway to destination. The application gateway monitors all traffic against its rules before deciding whether or not to forward it. As with the other proxy server types, the application gateway is the only address seen by the outside world so the internal network is protected.

Each of these mechanisms has its drawbacks as well as its advantages. The application gateway is considered to be a more advanced and secure firewall mechanism than the other three, but it uses more resources (memory and processor power) and can be slower. Packet filtering is generally faster and easier to implement, but is susceptible to attack from users faking their source IP address (IP spoofing)or source port to trick your firewall into thinking that the traffic should be allowed through.
To beef up packet filtering security, stateful inspection packet filtering, or stateful packet filtering (SPF) was introduced. Essentially, SPF performs the same as a packet filter, but with a couple of added measures. First, it looks at more details from each packet to determine what is contained within the packet rather than simply who and where it is from (or allegedly from). Second, it monitors communications between the two devices and compares the traffic not only to the rules it has been given, but also to the previous communications. If any communication seems out of context or out of the ordinary based on previous traffic the packet is rejected.

Many home routers come with built-in firewall capabilities. Generally, these tend to be simple packet filters. You can block all incoming connections on all ports if you are not acting as a server for anything. If you want to publish a web page from your computer, you would need to allow incoming traffic on Port 80 to get to your computer. If you want to be able to download files from your computer from outside using FTP, you would need to allow incoming connections on Port 21. A basic rule of security though is to start with the most restrictive and only open holes where it seems necessary.

In addition to the hardware firewall built into routers, there are also software applications called personal firewalls that you can run on your computer. These personal firewall applications monitor all incoming and outgoing communications on your computer as well as what services are trying to interact with what other services.

There are new vulnerabilities and flaws discovered everyday which could allow a hacker to break into your computer, take control of it for use in a denial-of-service attack or steal or destroy your data. Keeping your software patched and running updated antivirus software are very important pieces of the puzzle, but having a firewall block incoming connections in the first place is definitely a wise idea as well. No one security solution will solve everything. The more lines of defense you have in place, the harder it is for hackers to get in and the safer you will be.

Packet Sniffing

Its a cruel irony in information security that many of the features that make using computers easier or more efficient and the tools used to protect and secure the network can also be used to exploit and compromise the same computers and networks. This is the case with packet sniffing.
A packet sniffer, sometimes referred to as a network monitor or network analyzer, can be used legitimately by a network or system administrator to monitor and troubleshoot network traffic. Using the information captured by the packet sniffer an administrator can identify erroneous packets and use the data to pinpoint bottlenecks and help maintain efficient network data transmission.

In its simple form a packet sniffer simply captures all of the packets of data that pass through a given network interface. Typically, the packet sniffer would only capture packets that were intended for the machine in question. However, if placed into promiscuous mode, the packet sniffer is also capable of capturing ALL packets traversing the network regardless of destination.

By placing a packet sniffer on a network in promiscuous mode, a malicious intruder can capture and analyze all of the network traffic. Within a given network, username and password information is generally transmitted in clear text which means that the information would be viewable by analyzing the packets being transmitted.

A packet sniffer can only capture packet information within a given subnet. So, its not possible for a malicious attacker to place a packet sniffer on their home ISP network and capture network traffic from inside your corporate network (although there are ways that exist to more or less "hijack" services running on your internal network to effectively perform packet sniffing from a remote location). In order to do so, the packet sniffer needs to be running on a computer that is inside the corporate network as well. However, if one machine on the internal network becomes compromised through a Trojan or other security breach, the intruder could run a packet sniffer from that machine and use the captured username and password information to compromise other machines on the network.

Detecting rogue packet sniffers on your network is not an easy task. By its very nature the packet sniffer is passive. It simply captures the packets that are traveling to the network interface it is monitoring. That means there is generally no signature or erroneous traffic to look for that would identify a machine running a packet sniffer. There are ways to identify network interfaces on your network that are running in promiscuous mode though and this might be used as a means for locating rogue packet sniffers.

If you are one of the good guys and you need to maintain and monitor a network, I recommend you become familiar with network monitors or packet sniffers such as Ethereal. Learn what types of information can be discerned from the captured data and how you can put it to use to keep your network running smoothly. But, also be aware that users on your network may be running rogue packet sniffers, either experimenting out of curiosity or with malicious intent, and that you should do what you can to make sure this does not happen.