Getting the definition right

TalkBack 2 of 8:

Next »

« Previous

• Thread View
• Flat View

Yes, but the 2 purposes are closely linked

I like the way you characterize that. Maybe the point that got lost in my too many words is that the two purposes are linked. By focusing on the first purpose (enabling functionality) you motivate all of your legitimate users to fully participate in your security system. This makes the second purpose (restricting unauthorized access) much easier to implement.

In other words, the effectiveness of access restrictions depend on the degree of ubiquity of your security system. The more ubiquitous the system, the less opportunity for bad guys to sidestep your access control. The best way to make security ubiquitous is to motivate all users to willingly participate in it. The best way to do that is to focus on improving legitimate transactions, not just on preventing unauthorized ones.

Posted by: plibin   Posted on: 04/06/04 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now
• VMware Infrastructure: A Guide to Bottom-Line Benefits VMware Frustrated by the costs of maintain ever larger data centers?or building ... Download Now
• Server Consolidation and Containment With Virtual Infrastructure VMware To meet the constant demand to deploy, maintain and grow a broad array of ... Download Now