Story Behind NASA's Move to Continuous Monitoring
Change is tough, even when you know it's for the better.
Posted from Diigo. The rest of my favorite links are here.
Friday, June 25, 2010
security 06/26/2010
Posted from Diigo. The rest of my favorite links are here.
Tuesday, June 22, 2010
Ductility / systems
Kerckhoffs' principle - Wikipedia, the free encyclopedia
Bruce Schneier ties it in with a belief that all security systems must be designed to fail as gracefully as possible:
- "Kerckhoffs' principle applies beyond codes and ciphers to security systems in general: every secret creates a potential failure point. Secrecy, in other words, is a prime cause of brittleness—and therefore something likely to make a system prone to catastrophic collapse. Conversely, openness provides ductility."[2]
Eric Raymond extends this principle in support of open source security software, saying
Any security software design that doesn't assume the enemy possesses the source code is already untrustworthy; therefore, never trust closed source.[3]
Posted from Diigo. The rest of my favorite links are here.
Sunday, June 20, 2010
security 06/21/2010
BlackEnergy Version 2 Analysis - Research - SecureWorks
extending its criminal capabilities in ways never imagined by the author
Posted from Diigo. The rest of my favorite links are here.
Subscribe to:
Posts (Atom)