Sep 04 2008
A Minimalist View of Security
From spiresecurity.typepad.com:
“Day to day, the things we do as security professionals can be pretty complex. From a control perspective, it is fairly common to take a product category-like view and work from there. But nowadays, the security functions being performed have all been defined and anything “new” really is a flavor of something we’ve already done (this is why those of us who’ve been in the industry for awhile lament that everything’s been done before).
It may be useful to have a set of “atomic security functions” that act as building blocks so that all other solutions can be shown to be combinatorial or derivative of these functions. All of these functions are inline - between source consumer and target provider.”
