Hmmm ... check out the SANS ISC for an update on this topic:

http://isc.sans.org/