Why Security is Hard

• Many subtleties

• Too much to know

• No good resource on methods (esp software)

• Tools are bad

• Programming is hard

• Popular languages are really awful

• The only constant is change

The trinity of trouble

• CONNECTIVITY

  • The Internet is everywhere and everything is on it

• EXTENSIBILITY

  • Systems evolve in unexpected ways and are changed on the fly

• COMPLEXITY

  • Networked, distributed, mobile code is hard

Previous slide

Next slide

Back to first slide

View graphic version