Firewall Wizards mailing list archives

Re: SCADA


From: "R. DuFresne" <dufresne () sysinfo com>
Date: Thu, 23 Apr 2009 17:03:56 -0400 (EDT)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, 15 Apr 2009, Bill McGee (bam) wrote:

And what, exactly, is 'reliable'? The only reasonable definition I can think of is one that hasn't been broken into 'YET'. Like 
has been said before, unless you disassemble your machine, embed it into a cement and glass matrix, and dump it in the ocean, there is no such thing as 
'secure' - and even then... Everything else involves degrees of risk balanced with the need to actually conduct business.

In spite of what some of the purists on this list might imply, security is a trade-off, and every naive administrator believes his/her 
network to be 'secure' until it isn't. The rest of us manage risk and try our best to reduce the cost of risk to a 
level below the value of the business being conducted. Our job as security professionals is to help organizations reduce that risk as 
much as possible. Anyone selling anything else is hawking snake oil.



I'm not sure that with many outside security that reliable equates with security in mind. More often it equates with uptime, or time between reboots due to system hangs. Point being, one can not simply ask how reliable is it, without adding more to the context of the questing evaluation. "One man's garbage being another's treasure"...



Thanks,

Ron DuFresne
- -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        admin & senior security consultant:  sysinfo.com
                        http://sysinfo.com
Key fingerprint = 9401 4B13 B918 164C 647A  E838 B2DF AFCC 94B0 6629

These things happened. They were glorious and they changed the world...,
and then we fucked up the endgame.    --Charlie Wilson
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFJ8Ne/st+vzJSwZikRAhVPAJ0UBuLl+cB6y/y8fMh7ycMA1E8IFQCgsi9T
dd+Ky2EvbzvD1MtFQn3M410=
=RpJV
-----END PGP SIGNATURE-----
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards


Current thread: