Re: [ga] Net security's a losing battle

[Joanna Lane <jo-uk@rcn.com>]

on 9/28/01 2:14 PM, Patrick Greenwell at patrick@stealthgeeks.net wrote:

> On Fri, 28 Sep 2001, Joanna Lane wrote:
>> what caught my attention was Scheier's [...] his viewpoint that companies are
reluctant to report cyberattacks because of the stigma, making things worse.
> 
> It's not just stigma, it's a potential liability issue as well.

A company that sets out to hide from legal responsibilities is not one the
industry should be defending. Reluctance to share reports amongst colleagues
for any reason would hamper the industry's overall ability to exercise
damage limitation. I'm not sure that's an acceptable position for an
organization that is accountable to the public for regulating the security
of the industry's critical infrastructure.
 
> I do believe that the idea that Internet security is a losing battle is
> alarmist hogwash.
> 
> Hit something with a stick for long enough and eventually the object of
> attention is going to take steps to avoid getting hit.

Hit hard enough, the object is going to suffer catastrophic failure from a
single event.
 

> My apologies regarding the redaction.
Thank you.

Regards,
Joanna
> 
> 
> /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
> Patrick Greenwell
> "There should be warning labels for politicians."
> --  Derek Smalls
> \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
> 
> 

--
This message was passed to you via the ga-full@dnso.org list.
Send mail to majordomo@dnso.org to unsubscribe
("unsubscribe ga-full" in the body of the message).
Archives at http://www.dnso.org/archives.html