Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Full Disclosure: Re: emergent security properties

Re: emergent security properties

From: Pavel Kankovsky <peak_at_argo.troja.mff.cuni.cz>
Date: Wed, 27 Dec 2006 00:47:07 +0100 (CET)

On Mon, 18 Dec 2006, Nguyen Pham wrote:

> The problem is that I can hardly find out some real examples in the
> field of network security in terms of sub-networks, firewalls, servers,
> applications, etc. with their corresponding security properties.

A trivial emergent loss of security: You have some persons and every
person is operating his or her own personal computer. No person has
physical access to anyone else's computer. As long as the computers are
isolated, the system can be quite secure even if in the presence of
various security holes in software and hardware. The only person who can
exploit them is (via) the owner of the computer. Connect all those
computers to a network and... (Any similarity to any existing global
network is purely coincidental.)

I am afraid it will be pretty difficult to find an example where the
security increases with complexity. Perhaps some Byzantine
"security-breach tolerant" systems?

--Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Received on Dec 26 2006

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]