Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
White House CyberSecurity - Jobs, Research, and Rhetoric, but Few Results
Richard Forno, 2001-12-12

The commitment by the federal government to further computer security research may be laudable, but it fails to address the root cause of most security issues: bad software.

Comments Mode:
National Security Agency's Security-Enhanced Linux should be the foundation 2001-12-13
seeing the forest thru the trees (1 replies)
NSA SELinux has nothing to do with this 2001-12-17
Anonymous (1 replies)
I fail to see what SELinux has to do with this. Technology is what got us into this problem in the first place, and we need to take a far more holistic approach. Let's get this straight: It's not about technology, it's about how we use technology, i.e. the people and process aspect.

It comes down to education, awareness, knowledgable and trained administrators, top-level recognition of security issues and commitment (not lip service), secure default configurations, proper incident response, better end user training. This is what will make the difference - not technology. Sure, technology is a big part, but with the best technology we will still find ways to stuff things up if we don't address some of the issues listed above.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/46/9259#9259
NSA SELinux has nothing to do with this 2001-12-19
Is there a "safer hex"?







 

Privacy Statement
Copyright 2009, SecurityFocus