Comments on: Keynoting at ISSA tomorrow

By: Adam

Adam — Wed, 23 Apr 2008 15:08:40 +0000

Ian, I’m not sharing the slides. They’re not useful without me talking.
Pete, I don’t think that evidence offers proof, I think it allows us to disprove things.

By: Pete

Pete — Wed, 23 Apr 2008 13:56:09 +0000

I’ll give you a dollar if you say that public vuln counts prove that SDL works! ;-)
Pete

By: Iang

Iang — Wed, 23 Apr 2008 07:03:49 +0000

Excellent, any slides or transcript? It is encouraging to see more and more thinkers start to express this, as nothing much happens until there is industry consensus on this point.
Having agreed on that, what next? Curiously, my ’silver bullets’ model suggests that the preferred stability is one of permanent incapacity, in the presence of a real attacker. This could be likened to an OODA loop where the attacker survives permanently turning within the industry loop. This was somewhat of a surprise to me, and it’s a bit of a concern if true. What next?