Re: Castles and Security (fwd)

["Neil Buckley" <nwbuckley () mediaone net>]

<Lurk off>

Cool thread.

<Snip>

> I keep coming back to this issue of improving targeting and it seems like
> lots of people don't "get it" - I'm worried that I'm not communicating
effectively,
> or something. Am I being obscure?

No, but obscurity, I think is a relative term.   If anyone has tried to
target who is the bad guy and who is not they have already run up against
this problem.  If your simply admining firewalls and the latest security
widget then you might have trouble grasping this concept.  I'm not a avid
warfare person, but I gather from my vague recollection of my highschool
history that one of the reasons the Vietnam action was so difficult was that
the American soldiers couldn't "target" the enemy.

I believe the same will hold true for security folks that try and resolve
the problem with root cause analysis.  If you can't improve your ability to
identify the root cause (the attacker) then you'll spend an incalculable
amount of time chasing ghosts without really improving the situation.

OTOH  I  too could have failed to grasp the wisdom in Marcus's statement 8)

Later,

--Neil

</Lurk on>


_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards