<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On Jan 18, 2013, at 12:18, Dobbins, Roland wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div><br>On Jan 18, 2013, at 11:05 AM, Edward Lewis wrote:<br><br><blockquote type="cite">Adding security to an existing system will, inherently, make it more brittle. <br></blockquote><br>I strongly disagree with this statement. Increasing resilience under duress should be a key goal of any security enhancement; if it doesn't do this, then it hasn't been designed/implemented properly.<br></div></blockquote><div><br></div><div>(Perhaps the second half of the message should be first...meaning I think the issue is in what I meant by "adding".)</div><div><br></div>This was the proof offered to me (about the impact of bolting-on/retrofitting - as I meant "adding") years back:</div><div><br></div><div>Take an existing (vulnerable) system and model it as a state machine. States can be classified as "safe", "perilous", and "unsafe." Perilous states are those which are safe but have an arc into an unsafe state.</div><div><br></div><div>The act of "adding" security on to the system has the effect or preventing the system from entering unsafe states and perilous states, in the effort to prevent falling into unsafe states.</div><div><br></div><div>What is lost then, is any transition from a "safe" to "perilous" to "safe" states which per se is not a problem but is no longer permitted. This is the brittleness I refer to.</div><div><br></div><div>Looking back on this proof - I suppose if there were no safe-perilous-safe state transitions, there's no increase in brittleness. KInd of a degenerate case in the proof.</div><div><br><blockquote type="cite"><div><blockquote type="cite"> So trimming failed validations by removing brittleness is a good place to start.<br></blockquote><br>I agree with this statement, and most everything else you say, 100%. Perhaps 'adding security' wasn't really what you meant in the first sentence?<br></div></blockquote><br></div><div>"Adding security" maybe the trip up. Maybe I should have used the term I normally use "bolted-on security." When I wrote "adding" I had in mind the kind of addition like DNSSEC on DNS - which is a case of "bolted-on" security. It was a discussion over that where I was given the above proof.</div><div><br></div><div>"Adding security" as an ingredient in the initial architecting of a solution won't make the system more brittle. (Well, if the solution is "new" - it can't be "more" anything. ;) )</div><br><div>
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; ">-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=<span></span>-=-=-=-<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div>Edward Lewis <span></span> <br>NeuStar <span></span> You can leave a voice message at +1-571-434-5468<br><br>There are no answers - just tradeoffs, decisions, and responses.</div></div></div></span></span>
</div>
<br></body></html>