Interesting...I remember this point being brought up on BugTraq about 7 months ago.

Information systems are becoming increasingly complex, and as a result one cannot look at a single configuration option without taking into consideration how that option affects the total system.

Sysadmins, network admins, developers, and security experts need to take a 'holistic' view of their systems. Understanding how each piece fits into the whole might prevent situations like this type of 'gestalt' compromise.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/251/27163#27163