• “Never underestimate the attention, risk, money and time that an opponent will put into reading traffic.”

    Robert Morris, former Chief Scientist of the US National Security Agency (NSA), National Computer Security Center, "Crypto '95 invited talks by R. Morris and A. Shamir", 1995

    Read more...
  • “The more complex the threats become, the more you have to do the basics and groundwork really well. Staying aware and on top of new vulnerabilities and ensuring that patches and software updates are rapidly implemented is crucial.”

    Jeff Shipley, Cisco Intelligence Collection Manager, Cisco 2008 Annual Security Report

    Read more...
  • “We are a cyber nation. The U.S. information infrastructure--including telecommunications and computer networks and systems and the data that reside on them--is critical to virtually every aspect of modern life. This information infrastructure is increasingly vulnerable to exploitation, disruption, and destruction by a growing array of adversaries.”

    The National Coordination Office (NCO) for Networking Information Technology Research and Development (NITRD), Federal Register: December 30, 2008 (Volume 73, Number 250).

    Read more...
fact: Security is a process
Synaptic Facts and FAQs - Security in general


A mantra of the well known security expert Bruce Schneier, founder of BT Counterpane and a pioneer in the development of Managed Security Monitoring, is that "security is a process, not a product". Security cannot be achieved by just adding strong cryptographic algorithms to a computer system. Implementations of the cryptographic algorithms reside within complex computer systems. These complex computer systems then interact with even more complex human dynamics.  A failure anywhere in this ecosystem can seriously compromise security. Security must be addressed at a holistic level and as an ongoing process involving the entire organisation and all its parts. To learn more about security as a process read Schneier's article here.

Taking the above into account, modern cryptographic security systems still rely on the security of the choice and configuration of cryptographic algorithms. Algorithms such as DES with a 56-bit key are no longer used because they fail to provide adequate security, failing in practice against attackers who can afford US$10,000 to mount the attack. If a central cryptographic component of the crypto system fails, security may be entirely lost.

Synaptic has designed our security ecosystem to strengthen the security process, not just the cryptographic components. Click here to read more about Synaptic Labs' line of argument. Click here to read more about risks facing mainstream cryptographic systems today. 

Last Updated on Friday, 16 January 2009 13:28
 

Related Items