Re: Defense in Depth to the Desktop

[Frederick M Avolio <fred () avolio com>]

At 04:30 PM 12/13/2004 -0500, Paul D. Robertson wrote:
> > > This
> > > > is the classic "eggshell" weakness of network security, hard and 
> crunchy on
> > > the
> > > > outside, soft and chewy on the inside.  The Strong Internal Network 
> Defense
> > >
> > > I don't think I'd use eggshell to denote hard ;)
> > >
> > But I would.  It's relatively hard compared to what's inside, but, as 
> you note ...

And this is all an example of the loss of historical data we experience in 
network security. (I've ranted on it here: 
http://www.ianetsec.com/news/all_fc_avolio1.htm).

Of course, it is not like an egg. It is like a candy bar that has a 
"crunchy shell around a soft, chewy center" (Cheswick describing the Bell 
Lab's network defense in "The Design of a Secure Internet Gateway."

Fred



_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards