April 27, 2007

Spire's Second Law of Internet Dynamics

Risk and value are positively correlated.

(Ceterus parabus.)

Spire's First Law

Apr 27, 2007 11:46:58 AM

The comments to this entry are closed.

NEXT POST
On Value and Loss Andy Jaquith's new excellent book, Security Metrics is a must-read for any anyone even slightly interested in getting more scientific about the Art of Security or perhaps even looking to rise up in unison against subjective, biased, sometimes excellent, oft-times not, auditors and other security reviewers that second guess everything you do (no offense to you good auditors out there ;-)). There is, however, one area that is surprisingly naive and worth calling out, especially since people like SHRDLU at Layer8 and Alex at RiskAnalys.is are reinforcing it. Both have echoed their support for Andy's attack of annual loss expectancy...
PREVIOUS POST
What a bunch of bull Schneier is off on a sue your way to security nirvana run again about software security: "The primary reason the IT security industry exists is because IT products and services aren't naturally secure." Naturally secure. Naturally secure. Naturally secure. I can't seem to get it through my head. What the heck does "naturally secure" mean? Name any non-trivial asset or resource that is "naturally secure"? Now, up the ante with an intelligent adversary. Somebody, please - what is it that can be naturally secure against an intelligent adversary? The notion of "natural" security in the face of an intelligent adversary...

I'm a guy with some ideas and opinions.

The Typepad Team

Search

Recent Comments