01/03/2023
How do you make the system secure?🤔 You paint its architectural layout with markers in three colors.
In today's highly connected world, the number of ways to develop an attack on a system by hacking into a single component is enormous. So, it’s a natural challenge to create a secure system - you have to carefully protect and verify all of its components. Given the high percentage of third-party code in most information systems and their many components, in practice, this is an impossible task.
There is a solution - it’s necessary to divide all the components of the system into three types 👇
✔️ Trusted - those that directly affect the security goals of the system
✔️ Highly trusted - those that increase trust in the data that pass through them
✔️ Untrusted - all others
An important part of coaching in team sports is the effective placement of players relative to each other. Likewise, in this situation, it’s important to correctly place the three categories of components in relation to each other. The untrusted components are placed on the “edge” of the system and the trusted components are placed in the center, with the highly trusted ones placed between them.
It means that 👇
⏩ Only basic protection and verification are sufficient for untrusted components, because the achievement of security goals doesn’t depend on them.
⏩ The requirements for protection and verification of trusted components are definitely high, but because trusted components are "covered" by highly trusted components, the demands on their protection can be mitigated.
⏩ Only the highly trusted components, which are usually few in numbers, need to be protected and verified as closely as possible.
This method is used to create Cyber Immune solutions, making it possible to create a trusted system – from mostly untrusted components.
Read more about Cyber Immunity solutions 👉https://kas.pr/5qrb
