SecurityRatty: Attacker's Royal Road to Your Company's System

This is cache of http://1raindrop.typepad.com/1_raindrop/2008/09/attackers-royal-road-to-your-companys-system.html. Cache is the snapshot of article that we took when we index feed.
To see original page click here.
We are not affiliated with the authors of this article and not responsible for its content.

Attacker's Royal Road to Your Company's System

2008-09-09 09:47:52 by Gunnar Peterson in 1 Raindrop

Following up on earlier posts on systemic failures and their causes, this is a great line by Vordel's Mark O'Neill:

Freud wrote that dreams are the "Royal Road" to the unconscious. Messaging Systems and mainframes can be the Royal Road for a malicious user to attack a banking system, unless the security thinking moves from a "claim by claim" thinking to thinking about the full transaction.

What a great concept - you are dreaming that the messaging system does not need security, and instead you give the attacker a Royal Road straight to your book of business.

Also, Vordel's conference is coming up this month in Dublin, the lineup looks good, esp. the keynote - Don Adams's (TIBCO CTO) "Service Oriented Architecture, Security and a Modern Shillelagh"