Living with decade-old vulnerabilities in datacentre software. Issue 4 (April 2019)

• Record Type: Journal Article
• Authors: Goldberg, Daniel
• Is Part Of: Network security. Volume 2019:Issue 4(2019)
• Page Start: 6
• Page End: 8
• Publication Date: 2019-04
• Subjects: Computer security -- Periodicals; Computer networks -- Security measures -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; Computers -- Access control -- Periodicals; 005.805
• DOI: 10.1016/S1353-4858(19)30046-7
• Languages: English
• ISSNs: 1353-4858

Abstract

Abstract : The underlying assumption that system software is secure by design has proven wrong many times over the past few years. A modern approach to network design requires a new basis – 'assume vulnerable'. As all defence is inherently a risk management process this assumption requires different methods of quantifying network security, performing changes and monitoring. The assumption that system software is secure by design has been proven wrong many times and a better approach to network design is – 'assume vulnerable'. As all defence is inherently a risk management process, this assumption requires different methods of quantifying network security, performing changes and monitoring. It is reasonable to assume that there are numerous vulnerabilities across different core system programs and libraries, explains Daniel Goldberg of Guardicore.