2 ms·
I think the most important lesson from the last couple of years is that all our security protocols must come with adversarial testing suites -- from inception.
by ivanr 12y ago
I think the most important lesson from the last couple of years is that all our security protocols must come with adversarial testing suites -- from inception. Clearly, there's a long way between designing a secure protocol (I am not saying that SSL and TLS were properly designed) and implementing one.
- amckenna 12y agoYeah I would have hoped that tests involving skipped or out of order protocol flows would have been part of their normal functional testing. I remember reading a while back about NASA's testing procedures and they have a team who's sole job is finding bugs in the code produced by the other development teams. It seems like that structure should be adopted for these security critical projects. Ideally the open source community is supposed to help out with the reviews, but in reality it needs to be someone's whole job.
- a3n 12y agoI think the NSA's clandestine backdooring of hardware, software and standards, in contradiction of their charter, shows that the processes and organizations producing and shipping those protocols, software and hardware also need adversarial testing.