Radical security development rethink urged

Monday, 14 April 2003, 1:43 PM EST

Traditional technology management methods are not capable of dealing with development of mission-critical security projects effectively, an industry firm claimed today.

Benjamin Jun, vice president of Cryptography Research, warned that fundamentally different engineering processes are needed because traditional methods have meant managers can create systems that are impossible to check and difficult to repair.

"Designers working on mission-critical security must focus on minimising the odds of security flaws, yet most engineers have had little, if any, training to teach them the skills necessary to do this effectively," said Jun.

"Although it's impossible to prove that a system will be secure, many managers fail to take even simple steps towards reducing the possibility that they'll ship a disaster.

[ Read more ]




Spotlight

Critical bug found in Cisco ASA products, attackers are scanning for affected devices

Several Cisco ASA products - appliances, firewalls, switches, routers, and security modules - have been found sporting a flaw that can ultimately lead to remote code execution by attackers.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  
DON'T
MISS

Fri, Feb 12th
    COPYRIGHT 1998-2016 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //