[Previous] [Next] [Index]
[Thread]
Re: Need a Security Consultant
>No offence intended with these words - just that I don't think any system can
>be that secure.
It all depends on how you set out to measure the claim. If one constructs a
security system well it is possible to measure the number of attempted breakins,
breaking failures etc. If one detects ten or so attempted breakins and know
that none succeeded you have a fair level of confidence.
If one has a multi-ringed security system such that an outer security screen has
to be penetrated before an inner screen can be attacked on can measure
differential attempt/failure ratios for the two systems.
The biggest problem however is not the lone hacker, in my experience these
people are relatively inexperienced and relatively easily detected. the biggest
problem comes from within, from disgruntled employees and ex-employees. There is
very little even the best security system can do to prevent a person with
physical access to plant from going in and wrecking havoc. In one case I know of
an individual who was upset at his employers decision to honour a court order
granting his wife maintenance payments. In revenge he cut through cables that
had taken 10 man years to lay and stole critical components of the system
attempting to ransom them. Catching him was easy but I don't know of any way he
could have been prevented.
Phill
References: