Category:
Customize My Settings Edit My Profile Register To Join Search Forums Main Page Forum Help Login To The Forums
Author
Message Text For:
Talking with: Security Expert M.E. Kabay
Navigation:

Discussion
Date Posted: Tuesday October 21, 2003 01:50:17 PM
Email Thread
Adaptive attackers, novice computer users, indifferent management it's no
wonder our defensive mechanisms need continuous refinement.



Reply
Top
Bottom
Next
Previous

yamada
Date Posted: Tuesday October 21, 2003 02:08:43 PM
Email Thread
I want to take issue with this analogy...

KABAY: Say that somebody broke into your house and opened the bottles of food in your refrigerator and then put the bottles back and left a note saying, "I opened the bottles to see what was in them but I didn't do any harm." Do you think anybody in his or her right mind would eat or drink the food in the bottles? That would be nuts. A stranger has entered a region of trust, your refrigerator, and done unknown things without your permission and observation to your food. Criminal hackers should understand that if an organization trusts the data and the program on a computer for business critical functions, then once a stranger has entered the system without permission the program or data are no longer trustworthy. I use that example for my students when I'm teaching to get over this profoundly ignorant perception or statement by the criminal.

*****

We need a better analogy. The cracker breaks in and assures us our data assets have not been vandalized. We will run MD5 over our data and see if the hash is identical to the MD5 hash we obtained before the security breech.

I'm not sure what equivalent to MD5 I have for the cold pizza slices in my refrigerator.

Reply
Top
Bottom
Next
Previous

yamada
Date Posted: Tuesday October 21, 2003 02:09:28 PM
Email Thread
I want to take issue with this analogy...
KABAY: Say that somebody broke into your house and opened the bottles of food in your refrigerator and then put the bottles back and left a note saying, "I opened the bottles to see what was in them but I didn't do any harm." Do you think anybody in his or her right mind would eat or drink the food in the bottles? That would be nuts. A stranger has entered a region of trust, your refrigerator, and done unknown things without your permission and observation to your food. Criminal hackers should understand that if an organization trusts the data and the program on a computer for business critical functions, then once a stranger has entered the system without permission the program or data are no longer trustworthy. I use that example for my students when I'm teaching to get over this profoundly ignorant perception or statement by the criminal.
*****
We need a better analogy. The cracker breaks in and assures us our data assets have not been vandalized. We will run MD5 over our data and see if the hash is identical to the MD5 hash we obtained before the security breech.
I'm not sure what equivalent to MD5 I have for the cold pizza slices in my refrigerator.

 Message edited by: yamada on Tuesday October 21, 2003 02:10:01 PM

Reply
Top
Bottom
Next
Previous

danielsw
Date Posted: Tuesday October 21, 2003 04:31:14 PM
Email Thread
>Re: electronic voting
Can these problems be solved in a way that is cost-effective for the nation, increases voter participation and increases accuracy? The answer is yes but we're not there yet.
-----------
Just like the escalation of force in the house analogy, electronic voting has the same problems. Sufficient force will always allow fradulent voting, but it might be detected and result in throwing out all the votes from a single machine, a single polling place, or the entire election. Of course this is equally true of nonelectronic voting.


Reply
Top
Bottom
Next
Previous
Navigation:

[ACM]   [Ubiquity]   [ACM Privacy Policy]