| Process, not Technology! |
|
|
|
|
|
|
|
|
|
|
| ¨ | Security
is defined relative to a context and a set |
||||||||
| of
assumptions. |
|||||||||
| ¨ | Both
context and assumptions change frequently |
||||||||
| SECURITY IS A PROCESS, |
|||||||||
| NOT A SOLUTION! |
|||||||||
| ¨ | The
statement “X is secure” is at best incomplete, |
||||||||
| and
is more commonly just wrong. |
|||||||||
|
|
| 600.436 High- |
|
| Assurance
Systems |
|
| Fall
01/Introduction |
| 13 |