600.436
High-Assurance Systems
Fall 01/Introduction
13
Process, not Technology!
¨Security is defined relative to a context and a set of assumptions.
¨Both context and
assumptions change frequently
SECURITY IS A
PROCESS,
NOT A SOLUTION!
¨The statement “X is
secure” is at best incomplete, and is more
commonly just wrong.