Firewall Wizards: Re: How automate firewall tests

From: Jim Seymour <jseymour_at_linxnet.com>
Date: Wed, 23 Aug 2006 10:53:34 -0400 (EDT)

"Marcus J. Ranum" <mjr_at_ranum.com> wrote:
[snip]
>
> The "take whole classes of problems off the table" approach
> is what engineers consider elegance of design. It's that kind
> of elegance that is mostly lacking in how we do operating
> systems and security system design, today.

There is a structured systems design book I have (I think that's the
one, anyway) that recommends input be conditioned as early in the data
flow as possible so it's done and over with, and you can not have to
worry about unconditioned data floating around in the system, being
(similarly) conditioned in multiple places (code redundancy), etc.
Similar concept.

Jim
_______________________________________________
firewall-wizards mailing list
firewall-wizards_at_listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
Received on Aug 23 2006