Yogurt and security: a tale of two things
Security is hard.
When people talk about security, they usually mean that they want to prevent some action from being take against some object: “I want to prevent the money from being stolen.” “I want to only teachers to be able to change the grade records.” “I want to keep attackers from gaining entry to the computer system.”
Security is really about economics, weighing costs against benefits. The goal of security is to make the cost of taking some unwanted action against an object greater than the benefit of securing it plus the value of the object itself. If you say “I want to prevent the money from being stolen,” you really mean “I want it to be more expensive to steal the money than the total value of the money plus the cost to protect it.” That’s why we feel secure in keeping 50 dollars in our wallet, but we hire armored trucks and guards with shotguns to feel secure in dealing with 500,000 dollars.
Sometimes the simple and obvious security solution—guards with shotguns—is the right solution. With security, however, the devil is in the details.
Consider: “I want to make sure that the yogurt I buy isn’t spoiled.”
Continue reading "Yogurt and security: a tale of two things" »