A new study tries to answer the question

Jul 30, 2005 16:32 GMT  ·  By

SANS Institute recently published a report about the top twenty Internet security vulnerabilities. Of those twenty vulnerabilities, only two affected Red Hat Enterprise Linux subscribers, for which Red Hat has already issued patches via Red Hat Network.

"There are many research reports that try to compare the number of vulnerabilities between Linux and other operating systems but none take into account the severity of the issues." said Mark Cox head of the Red Hat security response team, "This report shows there are relatively few critical issues affecting users of Linux based operating systems. However, we believe even one is unsatisfactory, and our strategy is to rapidly respond to fix these issues whilst innovating new technology to reduce the risk of future issues."

Established in 1989, SANS (SysAdmin, Audit, Network, Security) is a leading source for information security training and certification. SANS also develops, maintains, and makes available at no cost, the largest collection of research documents about various aspects of information security, and operates the Internet's early warning system - Internet Storm Center.

Its programs now reach more than 165,000 security professionals, auditors, system administrators, network administrators, chief information security officers, and CIOs who share the lessons they are learning and jointly find solutions to the challenges they face.