{"id":9006,"date":"2019-01-09T07:00:24","date_gmt":"2019-01-09T15:00:24","guid":{"rendered":"http:\/\/formtek.com\/blog\/?p=9006"},"modified":"2018-11-25T14:31:54","modified_gmt":"2018-11-25T22:31:54","slug":"security-the-odds-are-against-totally-securing-complex-programs","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/security-the-odds-are-against-totally-securing-complex-programs\/","title":{"rendered":"Security: The Odds are Against Totally Securing Complex Programs"},"content":{"rendered":"

Security is Hard.\u00a0 That’s the title of a 2001 paper by Ross Anderson<\/a> at the University of Cambridge, a paper<\/a> that looked at the application of security from the perspective of an economist.<\/p>\n

Ross concludes that “much has been written on the failure of information security mechanisms to protect end users from privacy violations and fraud. This misses the point. The real driving forces behind security system design usually have nothing to do with such altruistic goals. They are much more likely to be the desire to grab a monopoly, to charge different prices to different users for essentially the same service, and to dump risk. Often this is perfectly rational.”<\/p>\n

Ross explains the impossibility of ever being able to secure complex software.\u00a0 He offers the example of the Windows Operating System.\u00a0 In 2000, Windows OS had more than 35,000,000 lines of code. Because it was so large and complex, it could well have more than 1,000,000 bugs when released.\u00a0 The hackers may only need to find and exploit a single bug to compromise the system, whereas the developers that try to fix the bugs may only be able to fix a fraction of the total.\u00a0 The numbers make it difficult to ever raise a totally secure defense.<\/p>\n

In an interview with Search Security<\/a>, Ross said that “The information security problem is basically a problem of politics and regulation, rather than technology. Even if you were to encrust all of your medical systems with all sorts of fancy firewalls, encryption and goodness knows what, that wouldn’t fix the problem. ”<\/p>\n

 <\/p>\n

\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

Security is Hard.\u00a0 That’s the title of a 2001 paper by Ross Anderson at the University of Cambridge, a paper that looked at the application of security from the perspective of an economist. Ross concludes that “much has been written…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-9006","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/9006","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=9006"}],"version-history":[{"count":2,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/9006\/revisions"}],"predecessor-version":[{"id":9008,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/9006\/revisions\/9008"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=9006"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=9006"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=9006"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}