3 ms·
What do you all see as missing from this document? How about the security of apps and of 3rd party update services? Every app that has internet access is a po
by rapjr9 5y ago
What do you all see as missing from this document? How about the security of apps and of 3rd party update services? Every app that has internet access is a potential vulnerability for the whole network, a direct route to the inside. And we've also seen recently that 3rd party software update services can compromise everything. Are those not considered part of "Network Infrastructure Security"? If you're talking about defense in depth you can't limit the discussion to just the wired network hardware itself because there are all sorts of other things that can compromise the network (insider attacks, BYOD, compromised hardware, phishing, blackmail). You could follow every single step in this document perfectly and your network may still be easily compromised. There's no mention of wireless networks either. Your network could be compromised via an open Bluetooth interface. This also seems like a very Cisco oriented document.
- number6 5y agoI am also conflicted trusting an agency that's other job is to make networks less safe when it comes to network safety. The conflict of interest alone if enough, it doesn't even need their track records in spying on everyone.
- greggsy 5y agoI highly doubt any of the content in this is ‘bad’ or misleading - most security people have a pretty good BS detector and it would spread pretty quickly in the community. The worst thing might be a reference to an industry standard protocol, like IPSECv2, which is generally considered secure, but might be broken under certain conditions and only ever exploit under extreme circumstances (to avoid showing their hand).
- numpad0 5y ago> to make networks less safe Could it be substituted by "to get into a network"? Then it could be argued that they need adversaries to establish reliance on a working network.