3 ms·
that's one of the reasons a lot of security people these days will recommend not just relying on preventative controls, but also detection and response. The as
by raesene9 10y ago
that's one of the reasons a lot of security people these days will recommend not just relying on preventative controls, but also detection and response.
The assumption that nothing is 100% secure shouldn't lead to people just giving up , but hopefully lead to them spending effort on detecting attempted and successful intrusions and in having effective responses to them.
- jacquesm 10y ago> that's one of the reasons a lot of security people these days will recommend not just relying on preventative controls, but also detection and response. Unfortunately, the parties that need this most are the least likely to implement it. The usual response to a question whether or not intrusion detection or exfiltration dectection / prevention measures are installed is 'What?', which I find a much more scary answer than 'No.'.
- raesene9 10y agooh absolutely, there's a bad problem in security where people don't want to admit there might be a chance their controls aren't perfect, and by deploying better detect/react controls you are very much admitting that point. So there's a tendency to downplay those requirements (what OS or application vendor is going to say "hey you should deploy something for when our security fails on you")