This article demonstrates the common view that denying access to the network is the same thing as allowing access to the data. The first case is an example of a network-centric focus and its' failing is that once you're in, you can do anything. The other is an information-centric focus which sets access to the data and will not allow unauthorized use of it (ie copying, transmitting, etc).

While the use of the hardware component would reduce the stated risk to a helpful degree, it is pretty far from real trusted computing, where even the authorized users, including the system administrator or CSO, would not be able to tamper with data or systems in an unauthorized manner.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11410/34052#34052