The Threat Within - www.d50.org
And yet we continue to ignore the malicious... see www.d50.org
I did notice the comment: "...by checking that prospective employees have relevant security qualifications before hiring them". About time - but who is listening?
October 13, 2005
0 replies
The Threat Within - www.d50.org
And yet we continue to ignore the malicious... see www.d50.org
I did notice the comment: "...by checking that prospective employees have relevant security qualifications before hiring them". About time - but who is listening?
October 13, 2005
0 replies
Message has been deleted.
October 7, 2005
0 replies
www d50.org
www.d50.org
May 29, 2004
0 replies
Communications of the ACM - June 2004 Forum
"The Threat from Within
The special section "Homeland Security" (Mar. 2004) detailed external attacks on various computer systems but did not mention that threats also originate inside those systems.
The 9/11 attackers, for instance, were trained to fly inside ?the system? and allowed to board U.S. aircraft by that same system. Protecting U.S. computer systems requires Americans to assume those who would harm them might already be inside their development domains.
Two promising ways to examine U.S. software for security risks are path coverage analysis and concordance analysis. Programmers who discover unused paths should perform further tests or remove the suspect code. Moreover, they should generate a concordance for the code whereby high-risk words are highlighted and reviewed."
May 29, 2004