Security Renaissance

Promoting the art and mindset of information security

Ren - ais - sance:

(lowercase) a renewal of life, vigor, interest, etc.; rebirth; revival: a moral renaissance

Archive for the 'General' Category

The C-I-A Triad – weighed and found wanting

Wednesday, April 11th, 2007

Believe it or not, the field of Information Security has changed! Foundational concepts, such as the traditional C-I-A triad (Confidentiality, Integrity, and Availability) are being challenged and supplanted by a more inclusive model known as the Parkerian Hexad [1]. The Parkerian Hexad augments the traditional C-I-A triad by adding three elements. The result is a […]

Read the rest of this entry »

StolenID Search follow-up

Thursday, February 1st, 2007

A couple days ago I wrote about StolenID Search in my Computerworld blog.  Since then I’ve noticed that I was a bit late in the game in analyzing this.  Folks like Martin Mckeay, AndyITGuy, Dana Epp, and others heard about the service and have similar postings.
I even see that Scott Mitic, CEO of TrustedID, tried […]

Read the rest of this entry »

Security professionals deal with the law of unintended consequences every day.  For instance, vendor x creates “cool new widget,” a feature-rich application intended to enrich the otherwise sad and pathetic lives of every man, woman, and child on the Earth.  However, vendor x (being shortsighted, ignorant, stupid, or just plain human) didn’t realize that “cool […]

Read the rest of this entry »

New resources section

Tuesday, January 16th, 2007

In my last post, I mentioned that I was thinking about adding a resources section to the site.  Well, I now have the beginnings of this section up.  It is located at:  http://SecurityRenaissance.com/resources and currently contains the following essays:

Mobile Malware (short essay)
The emerging mobile malware threat (long essay)
Ethical Considerations for IT and Security Professionals
Analyzing the […]

Read the rest of this entry »

Expressions of Privacy

Monday, January 8th, 2007

I ran across a very interesting article on Economist.com that discusses how rules regarding the sharing of private information can be expressed logically. The article’s title is The logic of privacy: A new way to think about computing and personal information.
Here is an excerpt to wet your appetite:
For example, the Gramm-Leach-Bliley act states that “a […]

Read the rest of this entry »