Network Security from the wire pov. You religuously keep ontop of the latest attacks and patch your Bind and IIS servers to reduce the possibility of some script kiddie getting ambitious. When someone has access to wire on your network, with tools readily available on the internet you are owned. Its just a matter of time. Security Policy predicates that physical access remain monitored.
Users are to be educated about password policies and suspicuous activities.
Common tools to exploit these security concerns are ettercap, dsniff, ntop and iptraf. The article does show you an easy workaround, though. The article points out some major sites that have not updated their routers to handle ECN packets. Anything that helps destroy congestion at least has my attention. While talking with TrollBoy , we thought of an interesting project.