5 ms·
Hence the purpose behind threat modelling? All security is really just the swiss-cheese model. Some entities just invest in more slices than others to keep mor
by DaSHacka 2y ago
Hence the purpose behind threat modelling?
All security is really just the swiss-cheese model. Some entities just invest in more slices than others to keep more sophisticated/determined attackers out (such as nation states).
What other practical model is there for security then defense in depth? "Just make 100% bulletproof computers with no faults?"
- Animats 2y agoAlternative models: - Systems that store the code in read-only memory. Example: slot machines. - Systems with backup systems completely different from the main system, implemented by a different group, and thoroughly tested. Example: Airbus aircraft. - Systems continuously sanity-checked by hard-wired checkers. Example: Traffic lights. - Systems where the important computational functions are totally stateless and hardware reset to a ground state for each transaction. Example: #5 Crossbar.