{"id":2591,"date":"2020-07-28T10:43:30","date_gmt":"2020-07-28T14:43:30","guid":{"rendered":"https:\/\/zzzptm.com\/wordpress\/?p=2591"},"modified":"2020-07-28T10:43:30","modified_gmt":"2020-07-28T14:43:30","slug":"the-fallacies-of-network-security","status":"publish","type":"post","link":"https:\/\/zzzptm.com\/wordpress\/?p=2591","title":{"rendered":"The Fallacies of Network Security"},"content":{"rendered":"\n

Like the Fallacies of Distributed Computing, these are assumptions made about security by those that use the network. And, like those other fallacies, these assumptions are made at the peril of both project<\/a> and productivity.<\/p>\n\n\n\n

1. The network<\/a> can be made completely secure.<\/p>\n\n\n\n

2. It hasn’t been a problem before.<\/p>\n\n\n\n

3. Monitoring<\/a> is overkill.<\/p>\n\n\n\n

4. Syslog<\/a> information can be easily reviewed.<\/p>\n\n\n\n

5. alerts<\/a> are sufficient warning of malicious<\/a> behavior.<\/p>\n\n\n\n

6. Our competition is honest.<\/p>\n\n\n\n

7. Our users<\/a> will not make mistakes that will jeopardize or breach<\/a> security.<\/p>\n\n\n\n

8. A perimeter is sufficient.<\/p>\n\n\n\n

9. I don’t need security because nobody would want to hack<\/a> me.<\/p>\n\n\n\n

10. Time correlation amongst devices<\/a> is not that important.<\/p>\n\n\n\n

11. If nobody knows about a vulnerability<\/a>, it’s not a vulnerability.<\/p>\n\n\n\n

Effects of the Fallacies
1. Ignorance of network security<\/a> leads to poor risk<\/a> assessment.
2. Lack of monitoring, logging<\/a>, and correlation hampers or prevents forensic<\/a> investigation.
3. Failure to view competitors and users with some degree of suspicion will lead to vulnerabilities.
4. Insufficiently deep security measures will allow minimally sophisticated penetrations to succeed in ongoing and undetected criminal activity.<\/p>\n\n\n\n

I wrote this list for the purpose of informing, educating, and aiding any non-security<\/a> person that reads it. Failing that, it serves as something that I can fall back on when commiserating with other security guys.<\/p>\n","protected":false},"excerpt":{"rendered":"

Like the Fallacies of Distributed Computing, these are assumptions made about security by those that use the network. And, like those other fallacies, these assumptions are made at the peril of both project and productivity. 1. The network can be made completely secure. 2. It hasn’t been a problem before. 3. Monitoring is overkill. 4. Syslog information can be easily reviewed. 5. alerts are sufficient […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[],"class_list":["post-2591","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/2591","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2591"}],"version-history":[{"count":1,"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/2591\/revisions"}],"predecessor-version":[{"id":2592,"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/2591\/revisions\/2592"}],"wp:attachment":[{"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2591"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2591"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zzzptm.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2591"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}