Much of security has to do with what should be "common sense." Read the article attached Requirements Find examples in the media (2016, 2017 or 2018 only) where at least three of these laws were viol
te ch net.m ic ro so ft.c o m
http s://te ch net.m ic ro so ft.c o m /e n-u s/lib ra ry /h h278941.a sp x
T e n Im muta b le L aw s O f S ecu rit y ( V ers io n 2 .0 )
H ere a t th e M ic ro so ft S ecu rit y R esp onse C ente r, w e in ve stig ate th ousa nds o f s e cu rit y r e ports e ve ry y e ar. In s o m e
c a se s, w e fin d th at a r e port d escrib es a b ona fid e s e cu rit y v u ln era bilit y r e su lt in g fr o m a n is su e in o ne o f o ur
p ro ducts ; w hen th is h appens, w e d eve lo p a c o rre ctiv e u pdate a s q uic kly a s p ossib le . In o th er c a se s, th e r e porte d
p ro ble m s s im ply r e su lt fr o m a m is ta ke s o m eone m ade in u sin g th e p ro duct, o r o ur in ve stig atio n fin ds a p ro ble m w it h
t h e p ro duct th at, w hile tr o uble so m e fo r u se rs , d oes n ot e xp ose th em to a s e cu rit y v u ln era bilit y . B ut m any fa ll in
b etw een. T hey a re g enuin e s e cu rit y p ro ble m s, b ut th e p ro ble m s d on't r e su lt fr o m p ro duct fla w s. O ve r th e y e ars ,
w e'v e d eve lo ped a lis t o f is su es lik e th ese th at w e c a ll th e 1 0 Im muta ble L aw s o f S ecu rit y .
D on't h old y o ur b re ath w ait in g fo r a n u pdate th at w ill p ro te ct y o u fr o m th e is su es w e'l l d is cu ss b elo w . It is n 't p ossib le
f o r M ic ro so ft— or a ny s o ftw are v e ndor— to " fix " th em , b eca use th ey r e su lt fr o m th e w ay c o m pute rs w ork . B ut d on't
a bandon a ll h ope y e t. S ound ju dgm ent is th e k e y to p ro te ctin g y o urs e lf a gain st th ese p it fa lls , a nd if y o u k e ep th em in
m in d, y o u c a n s ig nif ic a ntly im pro ve th e s e cu rit y o f y o ur c o m pute rs , w heth er th ey s it o n y o ur d esk, tr a ve l in y o ur
p ocke t, o r e xis t in a v ir tu al c lo ud. ( T hro ughout th is lis t w e’ll u se “ c o m pute r” to m ean a ll o f th ose o bje cts , b y th e w ay.)
T he 1 0 Im muta b le L aw s
L aw # 1: If a b ad g uy c a n p ers u ade y o u to r u n h is p ro gra m o n y o ur c o m pute r, it 's n ot s o le ly y o ur c o m pute r a nym ore .
L aw # 2: If a b ad g uy c a n a lt e r th e o pera tin g s yste m o n y o ur c o m pute r, it 's n ot y o ur c o m pute r a nym ore .
L aw # 3: If a b ad g uy h as u nre str ic te d p hysic a l a cce ss to y o ur c o m pute r, it 's n ot y o ur c o m pute r a nym ore .
L aw # 4: If y o u a llo w a b ad g uy to r u n a ctiv e c o nte nt in y o ur w ebsit e , it 's n ot y o ur w ebsit e a ny m ore .
L aw # 5: W eak p assw ord s tr u m p s tr o ng s e cu rit y .
L aw # 6: A c o m pute r is o nly a s s e cu re a s th e a dm in is tr a to r is tr u stw orth y.
L aw # 7: E ncry p te d d ata is o nly a s s e cu re a s it s d ecry p tio n k e y.
L aw # 8: A n o ut- o f- d ate a ntim alw are s ca nner is o nly m arg in ally b ette r th an n o s ca nner a t a ll.
L aw # 9: A bso lu te a nonym it y is n 't p ra ctic a lly a ch ie va ble , o nlin e o r o fflin e.
L aw # 10: T e ch nolo gy is n ot a p anace a.
L aw # 1:
If a b ad g uy c an p ers u ad e y o u t o r u n h is p ro gra m o n y o ur c o m pute r, it 's n ot s o le ly y o ur c o m pute r
a n ym ore
I t's a n u nfo rtu nate fa ct o f c o m pute r s cie nce : w hen a c o m pute r p ro gra m r u ns, it w ill d o w hat it 's p ro gra m med to d o,
e ve n if it 's p ro gra m med to b e h arm fu l. W hen y o u c h oose to r u n a p ro gra m , y o u a re m akin g a d ecis io n to tu rn o ve r a
c e rta in le ve l o f c o ntr o l o f y o ur c o m pute r to it - - o fte n a nyth in g u p to th e lim it s o f w hat y o u y o urs e lf c a n d o o n th e
c o m pute r ( a nd s o m etim es b eyo nd). It c o uld m onit o r y o ur k e ystr o ke s a nd s e nd th em to c rim in als e ager fo r th e
i n fo rm atio n. It c o uld o pen e ve ry d ocu m ent o n th e c o m pute r, a nd c h ange th e w ord " w ill" to " w on't " in a ll o f th em . It
c o uld s e nd r u de e m ails to a ll y o ur fr ie nds. It c o uld in sta ll a v ir u s. It c o uld c re ate a " b ack d oor" th at le ts s o m eone
r e m ote ly c o ntr o l y o ur c o m pute r. It c o uld r e la y a b ad g uy’s a tta ck o n s o m eone e ls e ’s c o m pute rs . O r it c o uld ju st
r e fo rm at y o ur h ard d riv e .
T hat's w hy it 's im porta nt n eve r to r u n a p ro gra m fr o m a n u ntr u ste d s o urc e , a nd to lim it th e a bilit y o f o th ers to m ake
t h at d ecis io n fo r y o u o n y o ur c o m pute r. T here 's a n ic e a nalo gy b etw een r u nnin g a p ro gra m a nd e atin g a s a ndw ic h . If
a s tr a nger w alk e d u p to y o u a nd h anded y o u a s a ndw ic h , w ould y o u e at it ? P ro bably n ot. H ow a bout if y o ur b est
f r ie nd g ave y o u a s a ndw ic h ? M ayb e y o u w ould , m ayb e y o u w ould n't — it d epends o n w heth er s h e m ade it o r fo und it
l y in g in th e s tr e et. A pply th e s a m e c rit ic a l th ought to a p ro gra m th at y o u w ould to a s a ndw ic h , a nd y o u'l l u su ally b e
s a fe .
L aw # 2: If a b ad g uy c an a lt e r t h e o pera tin g s yste m o n y o ur c o m pute r, it 's n ot y o ur c o m pute r a n ym ore
1/6
I n th e e nd, a n o pera tin g s yste m is ju st a s e rie s o f o nes a nd z e ro es th at, w hen in te rp re te d b y th e p ro ce sso r, c a use
t h e c o m pute r to d o c e rta in th in gs. C hange th e o nes a nd z e ro es, a nd it w ill d o s o m eth in g d if fe re nt. W here a re th e
o nes a nd z e ro es s to re d? O n th e c o m pute r, r ig ht a lo ng w it h e ve ry th in g e ls e ! T hey'r e ju st file s, a nd if o th er p eople
w ho u se th e c o m pute r a re p erm it te d to c h ange th ose file s, it 's " g am e o ve r. ”
T o u nders ta nd w hy, c o nsid er th at o pera tin g s yste m file s a re a m ong th e m ost tr u ste d o nes o n th e c o m pute r, a nd th ey
g enera lly r u n w it h s yste m -le ve l p riv ile ges. T hat is , th ey c a n d o a bso lu te ly a nyth in g. A m ong o th er th in gs, th ey'r e
t r u ste d to m anage u se r a cco unts , h andle p assw ord c h anges, a nd e nfo rc e th e r u le s g ove rn in g w ho c a n d o w hat o n
t h e c o m pute r. If a b ad g uy c a n c h ange th em , th e n ow -u ntr u stw orth y file s w ill d o h is b id din g, a nd th ere 's n o lim it to
w hat h e c a n d o. H e c a n s te al p assw ord s, m ake h im se lf a n a dm in is tr a to r o n th e c o m pute r, o r a dd e ntir e ly n ew
f u nctio ns to th e o pera tin g s yste m . T o p re ve nt th is ty p e o f a tta ck, m ake s u re th at th e s yste m file s ( a nd th e r e gis tr y , fo r
t h at m atte r) a re w ell p ro te cte d. In m odern o pera tin g s yste m s, d efa ult s e ttin gs la rg ely p re ve nt a nyo ne b ut
a dm in is tr a to rs fr o m m akin g s u ch b edro ck c h anges. P re ve ntin g r o gue p ro gra m s fr o m g ain in g a dm in is tr a tiv e -le ve l
a cce ss is th e b est w ay o f p ro te ctin g th e o pera tin g s yste m . T hat’s b est a cco m plis h ed b y n ot o pera tin g y o ur c o m pute r
f r o m a n a cco unt w it h a dm in is tr a tiv e p riv ile ges e xce pt w hen s p ecif ic ta sks m ake it a bso lu te ly n ece ssa ry – a nd
l o ggin g o ut o f th at h ig h-p riv ile ge m ode a s q uic kly a s p ossib le o nce y o ur ta sk is c o m ple te . H om e u se rs s h ould
c o nsid er c re atin g a n “ e ve ry d ay” a cco unt s e t to o pera te w it h s ta ndard -le ve l u se r p erm is sio ns. O n th ose r e la tiv e ly
r a re o cca sio ns w hen y o u r e ally d o n eed to m ake b ig c h anges, y o u c a n lo g in to th e a dm in is tr a tiv e a cco unt, d o
w hate ve r n eeds to b e d one, a nd s w it c h b ack to th e s a fe r a cco unt w hen y o u’r e fin is h ed.
L aw # 3: If a b ad g uy h as u nre str ic te d p hysic al a ccess t o y o ur c o m pute r, it 's n ot y o ur c o m pute r a n ym ore
O h, th e th in gs a b ad g uy c a n d o if h e c a n la y h is h ands o n y o ur c o m pute r! H ere 's a s a m plin g, g oin g fr o m S to ne A ge
t o S pace A ge:
He c o uld m ount th e u lt im ate lo w -te ch d enia l o f s e rv ic e a tta ck, a nd s m ash y o ur c o m pute r w it h a
sle dgeham mer.
He c o uld u nplu g th e c o m pute r, h aul it o ut o f y o ur b uild in g, a nd h old it fo r r a nso m .
He c o uld b oot th e c o m pute r fr o m r e m ova ble m edia , a nd r e fo rm at y o ur h ard d riv e . B ut w ait , y o u s a y, I'v e
co nfig ure d th e B IO S o n m y c o m pute r to p ro m pt fo r a p assw ord w hen I tu rn th e p ow er o n. N o p ro ble m – if h e
ca n o pen th e c a se a nd g et h is h ands o n th e s yste m h ard w are , h e c o uld ju st r e pla ce th e B IO S c h ip . ( A ctu ally ,
th ere a re e ve n e asie r w ays).
He c o uld r e m ove th e h ard d riv e fr o m y o ur c o m pute r, in sta ll it in to h is c o m pute r, a nd r e ad a ny u nencry p te d
data .
He c o uld d uplic a te y o ur h ard d riv e a nd ta ke it b ack to h is la ir . O nce th ere , h e'd h ave a ll th e tim e in th e w orld
to c o nduct b ru te -fo rc e a tta cks, s u ch a s tr y in g e ve ry p ossib le lo gon o r d ecry p tio n p assw ord . P ro gra m s a re
ava ila ble to a uto m ate th is a nd, g iv e n e nough tim e, it 's a lm ost c e rta in th at h e w ould s u cce ed. O nce th at
happens, L aw s # 1 a nd # 2 a bove a pply .
He c o uld a dd a r e co rd in g d evic e o r tr a nsm it te r to y o ur k e yb oard , th en m onit o r e ve ry th in g y o u ty p e in clu din g
yo ur p assw ord s.
A lw ays m ake s u re th at a c o m pute r is p hysic a lly p ro te cte d in a w ay th at's c o nsis te nt w it h it s v a lu e— and r e m em ber
t h at th e v a lu e o f a c o m pute r in clu des n ot ju st th e v a lu e o f th e h ard w are it s e lf , b ut th e v a lu e o f th e d ata o n it ,
and
th e
v a lu e o f th e a cce ss to y o ur n etw ork th at a b ad g uy c o uld g ain . A t a m in im um , b usin ess-c rit ic a l c o m pute rs s u ch a s
d om ain c o ntr o lle rs , d ata base s e rv e rs , a nd p rin t/file s e rv e rs s h ould a lw ays b e in a lo cke d r o om th at o nly p eople
c h arg ed w it h a dm in is tr a tio n a nd m ain te nance c a n a cce ss. B ut y o u m ay w ant to c o nsid er p ro te ctin g o th er c o m pute rs
a s w ell, a nd p ote ntia lly u sin g a ddit io nal m easu re s to g uard th eir p hysic a l in te grit y .
I f y o u tr a ve l w it h a la pto p o r o th er p orta ble c o m pute r, it 's a bso lu te ly c rit ic a l th at y o u p ro te ct it . T he s a m e fe atu re s
2/6
t h at m ake th em g re at to tr a ve l w it h – s m all s iz e , lig ht w eig ht, a nd s o fo rth – a ls o m ake th em e asy to s te al. T here a re
a v a rie ty o f lo cks a nd a la rm s a va ila ble fo r la pto ps, s o m e m odels le t y o u r e m ove th e h ard d riv e a nd c a rry it w it h y o u,
a nd a lm ost a ll c a n b e u se d w it h e xtr e m ely s m all, e xtr e m ely p orta ble s to ra ge – e .g . U SB th um b d riv e s – fo r s to rin g
y o ur d ata w hile y o u tr a ve l. Y ou a ls o c a n u se fe atu re s s u ch a s d riv e e ncry p tio n a va ila ble in m ost m odern o pera tin g
s yste m s to m it ig ate th e d am age if s o m eone s u cce eded in s te alin g th e c o m pute r, o r to r e ta in s o m e c o nfid ence in it s
p ro te ctio n if it ’s ta ke n fr o m y o u in a n u nexp ecte d b ag c h eck o r u nfr ie ndly b ord er c ro ssin g. If th e c o m pute r w alk s o ff
o r is lo st, y o u’ll s till n eed to a ddre ss th e lo ss o f th e h ard w are , b ut it ’ll b e h ard er fo r y o ur d ata to b e d is clo se d w it h out
y o ur k n ow le dge. B ut th e o nly w ay y o u c a n k n ow w it h 1 00% c e rta in ty th at y o ur d ata is s a fe a nd th e h ard w are h asn 't
b een ta m pere d w it h , is to k e ep th em o n y o ur p ers o n a t a ll tim es w hile tr a ve lin g.
L aw # 4:
If y o u a llo w a b ad g uy to r u n a ctiv e c o nte nt o n y o ur w ebsit e o r o nlin e a pplic a tio n, it 's n ot y o ur w ebsit e a ny
m ore
I n L aw # 1, a b ad g uy tr ic ks y o u in to d ow nlo adin g a h arm fu l p ro gra m a nd r u nnin g it , g iv in g h im c o ntr o l o ve r y o ur
c o m pute r a nd it s d ata – a t le ast a s m uch c o ntr o l a s y o u h ad. B ut w hat a bout th e r e ve rs e : if h e c a n u plo ad a ctiv e
c o nte nt – p ro gra m s, s crip ts , o r e ve n d ocu m ents a nd p ic tu re s d esig ned to c ra sh p eople s’ c o m pute rs in s p ecif ic w ays
– a nd h ave th em s e rv e d fr o m y o ur w ebsit e o r o nlin e a pplic a tio n? Y our s it e b eco m es h is p la tfo rm fo r r e ach in g o ut to
c a ptu re d ata fr o m s it e v is it o rs o r h arm th eir c o m pute rs , o r r e ach in g in w ard to w ard s o th er s yste m s th at s u pport y o ur
s it e .
I f y o u r u n a w ebsit e o r h oste d a pplic a tio ns, y o u n eed to lim it w hat v is it o rs c a n d o. S om e s it e s p ro vid e a n o pen fo ru m
f o r p eople to u plo ad a nd d is tr ib ute s o ftw are , c o de o r c o nfig ura tio ns – a nd th at’s fin e a s lo ng a s v is it o rs u nders ta nd
L aw # 1 a nd th e r is ks th at c o m e a lo ng w it h th eir d ow nlo ads. B ut if th e b ad g uy’s u plo aded p ro gra m s a ctu ally r u n o n
y o ur s e rv e r o r in th e b ro w se r o f v is it o rs , h e e ffe ctiv e ly o w n y o ur s it e a nd c a n im pers o nate y o u. W ors e , th e b ad g uy
c o uld g ain y o ur r ig hts to th e u nderly in g s yste m s, a nd m ig ht fin d a w ay to e xte nd h is c o ntr o l to th e s e rv e rs , d ata
s to ra ge o r n etw ork it s e lf . If y o ur s it e is o n s h are d in fr a str u ctu re o r a c lo ud-b ase d s e rv ic e , th is c a n p ut o th er s it e s
a nd d ata a t r is k, a nd p ote ntia lly c re ate in te re stin g lia bilit ie s fo r y o urs e lf a nd o th er p eople .
A p ro perly a dm in is te re d s it e h ost o r c lo ud s e rv ic e w ill h ave ta ke n m any o f th ese r is ks in to a cco unt a nd w ill d is a llo w
s crip ts o r p ro gra m s u plo aded to th e s e rv ic e fr o m a ffe ctin g o th er a cco unts th at h appen to s h are th e s a m e r e so urc e s.
J u st th e s a m e, y o u s h ould o nly a llo w a p ro gra m to r u n o n y o ur s it e o r a s p art o f y o ur a pplic a tio n if y o u w ro te it
y o urs e lf o r if y o u tr u st th e d eve lo per w ho w ro te it , a nd m ake s u re y o ur o pera tio ns a nd m ain te nance p ro ce sse s d on’t
r u n a fo ul o f th e h ost a dm in is tr a to r’s s e cu rit y p olic ie s.
L aw # 5: W eak p assw ord s t r u m p s tr o ng s ecu rit y
T he p urp ose o f h avin g a lo gon p ro ce ss is to e sta blis h w ho y o u a re . O nce th e o pera tin g s yste m k n ow s w ho y o u a re ,
i t c a n g ra nt o r d eny r e quests fo r s yste m r e so urc e s a ppro pria te ly . If a b ad g uy le arn s y o ur p assw ord , h e c a n lo g o n
a s y o u. In fa ct, a s fa r a s th e o pera tin g s yste m is c o nce rn ed, h e
is
y o u. W hate ve r y o u c a n d o o n th e s yste m , h e c a n
d o a s w ell, b eca use h e is y o u. M ayb e h e w ants to r e ad s e nsit iv e in fo rm atio n y o u'v e s to re d o n y o ur c o m pute r, lik e
y o ur e -m ail. M ayb e y o u h ave m ore p riv ile ges o n th e n etw ork th an h e d oes, a nd b ein g y o u w ill le t h im d o th in gs h e
n orm ally c o uld n't . O r m ayb e h e ju st w ants to d o s o m eth in g m alic io us a nd b la m e it o n y o u. In a ny c a se , it 's w orth
p ro te ctin g y o ur c re dentia ls .
A lw ays u se a p assw ord o n y o ur c o m pute r— it 's a m azin g h ow m any a cco unts h ave b la nk p assw ord s. A nd d eve lo p a
c o m ple x o ne. D on't u se y o ur d og's n am e, y o ur a nniv e rs a ry d ate , th e n am e o f th e lo ca l fo otb all te am , o r Q W ER TY /
1 2345 / o th er b asic k e yb oard p atte rn s – a nd a vo id u sin g s in gle “ d ic tio nary w ord s” ( th at is , w ord s th at c a n b e lo oke d
u p in th e d ic tio nary ). A nd d on't u se th e w ord " p assw ord !" B uild a p assw ord th at h as a m ix o f u pper- a nd lo w er-c a se
l e tte rs , n um bers , p unctu atio n m ark s, a nd s o fo rth . M ake it a s lo ng a s p ossib le ; c o nsid er u sin g tw o w ord s in
c o m bin atio n. ( If y o u s p eak m ult ip le la nguages, y o u m ig ht c h oose to m ix to ngues in y o ur p assw ord fo r e xtr a
c o m ple xit y .) A nd c h ange it o fte n.
3/6
O nce y o u'v e p ic ke d a s tr o ng p assw ord , h andle it a ppro pria te ly . D on't w rit e it d ow n. If y o u a bso lu te ly m ust w rit e it
d ow n, a t th e v e ry le ast k e ep it in a s a fe , a lo cke d d ra w er, o r p erh aps d eep in y o ur w alle t— th e fir s t th in g a b ad g uy
w ho's h untin g fo r p assw ord s w ill d o is c h eck fo r a y e llo w s tic ky n ote o n th e s id e o f y o ur s cre en, o r in th e to p d esk
d ra w er. D on't te ll a nyo ne w hat y o ur p assw ord is , a nd d on’t a sk fo r th eir s . M anagers , k id s, a nd e ve n IT h elp desk
s ta ff s h ould r a re ly if e ve r a sk fo r y o ur p assw ord . M odern o pera tin g s yste m s a nd p ro gra m s a llo w y o u to g iv e o th er
p eople p erm is sio n to s e e a nd u se y o ur file s, w it h out g iv in g o ut y o ur p assw ord s o th ey c a n im pers o nate y o u.
R em em ber w hat B en F ra nklin s a id : tw o p eople c a n k e ep a s e cre t, b ut o nly if o ne o f th em is d ead.
I f y o u h ave a cco unts fo r m ult ip le c o m pute rs a nd o nlin e s e rv ic e s, y o u’ll n eed to b ala nce r e quir e m ents fo r u niq ue a nd
s tr o ng p assw ord s, y e t lim it h ow m any p assw ord s y o u h ave to r e m em ber. F or a cco unts th at g iv e a cce ss to y o ur m ost
c rit ic a l in fo rm atio n – fin ancia l a cco unts , r e gula te d p ers o nal d ata , s e nsit iv e w ork a cce ss, a nd p rim ary e m ail a cco unts
t o n am e a fe w – u se a u niq ue p assw ord fo r e ach o ne, a nd fo llo w th eir a cce ss m anagem ent p olic ie s. If y o u’r e
a w ash in m ult ip le a cco unts th at g ath er lit tle p ers o nal in fo rm atio n a nd h ave lo w v a lu e if lo st, s u ch a s n ew s s it e s th at
r e quir e fr e e r e gis tr a tio n, c o nsid er d eve lo pin g o ne r e aso nably s tr o ng p assw ord a nd r e usin g it fo r m ost o r a ll o f th em .
F in ally , c o nsid er u sin g s o m eth in g s tr o nger th an – a nd in a ddit io n to – p assw ord s to id entif y y o urs e lf to th e s yste m .
W in dow s, fo r in sta nce , s u pports th e u se o f s m art c a rd s, w hic h s ig nif ic a ntly s tr e ngth ens th e a cco unt c h eckin g th e
s yste m c a n p erfo rm . Y ou m ay a ls o w ant to c o nsid er b io m etr ic p ro ducts s u ch a s fin gerp rin t a nd r e tin a s ca nners .
“ T w o-fa cto r a uth entic a tio n” o f th is s o rt in co rp ora te s n ot o nly s o m eth in g y o u k n ow ( y o ur p assw ord ) b ut s o m eth in g
y o u o w n ( a c a rd ) o r e ve n s o m eth in g y o u a re ( a p ers o n w it h y o ur u niq ue fin gerp rin t o r r e tin a) – d ra m atic a lly
i n cre asin g a uth entic a tio n s tr e ngth .
L aw # 6: A c o m pute r is o nly a s s ecu re a s t h e a d m in is tr a to r is t r u stw orth y
E ve ry c o m pute r m ust h ave a n a dm in is tr a to r: s o m eone w ho c a n in sta ll s o ftw are , c o nfig ure th e o pera tin g s yste m , a dd
a nd m anage u se r a cco unts , e sta blis h s e cu rit y p olic ie s, a nd h andle a ll th e o th er m anagem ent ta sks a sso cia te d w it h
k e epin g a c o m pute r u p a nd r u nnin g. B y d efin it io n, th ese ta sks r e quir e th at th e in div id ual h ave c o ntr o l o ve r th e
c o m pute r. T his p uts th e a dm in is tr a to r in a p osit io n o f u nequalle d p ow er. A n u ntr u stw orth y a dm in is tr a to r c a n n egate
e ve ry o th er s e cu rit y m easu re y o u'v e ta ke n. H e c a n c h ange th e p erm is sio ns o n th e c o m pute r, m odif y th e s yste m
s e cu rit y p olic ie s, in sta ll m alic io us s o ftw are , a dd b ogus u se rs , o r d o a ny o f a m illio n o th er th in gs. H e c a n s u bve rt
v ir tu ally a ny p ro te ctiv e m easu re in th e o pera tin g s yste m , b eca use h e c o ntr o ls it . W ors t o f a ll, h e c a n c o ve r h is
t r a cks. If y o u h ave a n u ntr u stw orth y a dm in is tr a to r, y o u h ave a bso lu te ly n o s e cu rit y .
W hen h ir in g a s yste m a dm in is tr a to r, r e co gniz e th e p osit io n o f tr u st th at a dm in is tr a to rs o ccu py, a nd o nly h ir e p eople
w ho w arra nt th at tr u st. C all h is r e fe re nce s, a nd a sk th em a bout h is p re vio us w ork r e co rd , e sp ecia lly w it h r e gard to
a ny s e cu rit y in cid ents a t p re vio us e m plo ye rs . If a ppro pria te fo r y o ur o rg aniz a tio n, y o u m ay a ls o c o nsid er ta kin g a
s te p th at b anks a nd o th er s e cu rit y -c o nscio us c o m panie s d o, a nd r e quir e th at y o ur a dm in is tr a to rs p ass a c o m ple te
b ackg ro und c h eck a t h ir in g tim e, a nd a t p erio dic in te rv a ls a fte rw ard . W hate ve r c rit e ria y o u s e le ct, a pply th em a cro ss
t h e b oard . D on't g iv e a nyo ne a dm in is tr a tiv e p riv ile ges o n y o ur n etw ork u nle ss th ey'v e b een v e tte d – a nd th is
i n clu des te m pora ry e m plo ye es a nd c o ntr a cto rs .
N ext, ta ke s te ps to h elp k e ep h onest p eople h onest. U se s ig n-in /s ig n-o ut s h eets o r lo g a cce ss b adge s w ip es to tr a ck
w ho's b een in th e s e rv e r r o om . ( Y ou d o h ave a s e rv e r r o om w it h a lo cke d d oor, r ig ht? If n ot, r e -re ad L aw # 3).
I m ple m ent a " tw o p ers o n" r u le w hen in sta llin g o r u pgra din g s o ftw are . D iv e rs if y m anagem ent ta sks a s m uch a s
p ossib le , a s a w ay o f m in im iz in g h ow m uch p ow er a ny o ne a dm in is tr a to r h as. A ls o , d on't u se th e A dm in is tr a to r
a cco unt— in ste ad, g iv e e ach a dm in is tr a to r a s e para te a cco unt w it h a dm in is tr a tiv e p riv ile ges, s o y o u c a n te ll w ho's
d oin g w hat. M any in dustr ie s r e quir e a udit lo gs d ocu m entin g a ll a ctiv it ie s o n c o ve re d b usin ess s yste m s; a udit tr a ils
c a n’t s to p r o gue a dm in s fr o m r u nnin g a m ok, b ut th ey c a n r e co rd w ho d id w hat if a p ro ble m is d is co ve re d la te r, a nd
e nfo rc e a s e nse o f in div id ual a cco unta bilit y . F in ally , c o nsid er ta kin g s te ps to m ake it m ore d if fic u lt fo r a r o gue
a dm in is tr a to r to c o ve r h is tr a cks. F or in sta nce , s to re a udit d ata o n w rit e -o nly m edia , o r h ouse S yste m A 's a udit d ata
o n S yste m B , a nd m ake s u re th at th e tw o s yste m s h ave d if fe re nt a dm in is tr a to rs . T he m ore a cco unta ble y o ur
a dm in is tr a to rs a re , th e le ss lik e ly y o u a re to h ave p ro ble m s.
4/6
L aw # 7: E ncry p te d d ata is o nly a s s ecu re a s it s d ecry p tio n k ey
S uppose y o u in sta lle d th e b ig gest, s tr o ngest, m ost s e cu re lo ck in th e w orld o n y o ur fr o nt d oor, b ut y o u p ut th e k e y
u nder th e fr o nt d oor m at. It w ould n't r e ally m atte r h ow s tr o ng th e lo ck is , w ould it ? T he c rit ic a l fa cto r w ould b e th e
w eak w ay th e k e y w as p ro te cte d, b eca use if a b urg la r c o uld fin d it , h e'd h ave e ve ry th in g h e n eeded to o pen th e
l o ck. E ncry p te d d ata w ork s th e s a m e w ay— no m atte r h ow s tr o ng th e c ry p to a lg orit h m is , th e d ata is o nly a s s a fe a s
t h e k e y th at c a n d ecry p t it .
M any o pera tin g s yste m s a nd c ry p to gra phic s o ftw are p ro ducts g iv e y o u a n o ptio n to s to re c ry p to gra phic k e ys o n th e
c o m pute r. T he a dva nta ge is c o nve nie nce – y o u d on't h ave to h andle th e k e y – b ut it c o m es a t th e c o st o f s e cu rit y .
S im ply p ut, n o m atte r h ow w ell th e k e ys a re h id den o n th e s yste m , th e s o ftw are h as to b e a ble to fin d th em – a nd if
i t c a n, s o c a n a s u ffic ie ntly m otiv a te d b ad g uy.
A b ette r s o lu tio n is to s to re th em in a p ro te cte d r e posit o ry . F or in sta nce , th e T ru ste d P la tfo rm M odule ( T P M ) c h ip
t h at’s p re se nt o n m ost c o m pute rs is d esig ned to s tr o ngly p ro te ct c ry p to gra phic k e ys, a nd r e le ase th em o nly w hen a
P IN is e nte re d. S m art c a rd s p ro vid e s im ila r p ro te ctio n, a nd th eir p orta bilit y m eans th at y o u c a n a ls o p hysic a lly
s e para te th em fr o m th e c o m pute r. B ut th e b est “ p ro te cte d r e posit o ry ” is y o ur b ra in – if th e k e y is a w ord o r p hra se ,
m em oriz e it .
L aw # 8: A n o ut-o f-d ate m alw are s can ner is o nly m arg in ally b ette r t h an n o m alw are s can ner a t a ll
A ntim alw are s ca nners w ork b y c o m parin g th e d ata o n y o ur c o m pute r a gain st a c o lle ctio n o f m alw are " s ig natu re s."
E ach s ig natu re is c h ara cte ris tic o f a p artic u la r m alw are fa m ily , a nd w hen th e s ca nner fin ds d ata in a file , e m ail o r
e ls e w here th at m atc h es th e s ig natu re , it c o nclu des th at it 's fo und tr o uble . It's v it a l th at y o u k e ep y o ur m alw are
s ca nner's s ig natu re file u p-to -d ate , a s n ew m alw are is c re ate d e ve ry d ay.
T he p ro ble m a ctu ally g oes a b it d eeper th an th is , th ough. T yp ic a lly , m alw are w ill d o th e g re ate st a m ount o f d am age
d urin g th e e arly s ta ges o f it s lif e , p re cis e ly b eca use a ntim alw are p ro gra m s w ill n ot b e a ble to d ete ct it , le t a lo ne
r e m ove it . O nce w ord g ets a ro und th at n ew m alw are is o n th e lo ose a nd p eople u pdate th eir s ig natu re s, th e
p ro pagatio n o f th e p ro ble m fa lls o ff a s p ro te ctio ns s p re ad th ro ugh th e e co syste m . T he k e y is to g et a head o f th e
c u rv e , a nd h ave u pdate d s ig natu re file s o n y o ur c o m pute r b efo re th e m alw are r e ach es y o ur m ach in e.
V ir tu ally e ve ry m ake r o f a ntim alw are s o ftw are p ro vid es a w ay to g et fr e e u pdate d s ig natu re file s fr o m th eir w ebsit e
o r fr o m a d edic a te d u pdate s e rv ic e . In fa ct, m any h ave " p ush " s e rv ic e s, in w hic h th ey'l l s e nd n otif ic a tio n e ve ry tim e
a n ew s ig natu re file is r e le ase d – s e ve ra l tim es a d ay, if n ece ssa ry . U se th ese s e rv ic e s. A ls o , k e ep th e m alw are
s ca nner it s e lf — th at is , th e s ca nnin g s o ftw are th at u se s th e s ig natu re file s— update d a s w ell. M alw are w rit e rs
r e gula rly d eve lo p n ew te ch niq ues a nd v a ria tio ns th at r e quir e th at s ca nners c h ange h ow th ey d o th eir w ork .
L aw # 9: A bso lu te a n onym it y is n 't p ra ctic ally a ch ie vab le , o nlin e o r o fflin e
A ll h um an in te ra ctio n in vo lv e s e xch angin g d ata o f s o m e k in d. If s o m eone w eave s e nough o f th at d ata to geth er, th ey
c a n id entif y y o u. T hin k a bout a ll th e in fo rm atio n th at a p ers o n c a n g le an in ju st a s h ort c o nve rs a tio n w it h y o u: In o ne
g la nce , th ey c a n g auge y o ur h eig ht, w eig ht, a nd a ppro xim ate a ge. Y our a cce nt w ill p ro bably te ll th em w hat c o untr y
y o u'r e fr o m , a nd m ay e ve n te ll th em w hat r e gio n o f th e c o untr y . If y o u ta lk a bout a nyth in g o th er th an th e w eath er,
y o u'l l p ro bably te ll th em s o m eth in g a bout y o ur fa m ily , y o ur in te re sts , w here y o u liv e , a nd w hat y o u d o fo r a liv in g. It
d oesn 't ta ke lo ng fo r s o m eone to c o lle ct e nough in fo rm atio n to fig ure o ut w ho y o u a re . If y o u u se a ny p aym ent
s yste m o th er th an c a sh o r a ny tr a nsp orta tio n o th er th an y o ur o w n tw o fe et, y o u le ave a tr a il o f d ata b re adcru m bs
t h at c a n b e u se d to r e co nstr u ct a p ers o nally id entif ia ble “ p ortr a it ” o f y o u w it h r e m ark a ble a ccu ra cy. If y o u c ra ve
a bso lu te a nonym it y , y o ur b est b et is to liv e in a c a ve a nd s h un a ll h um an c o nta ct.
T he s a m e th in g is tr u e o f th e In te rn et. If y o u v is it a w ebsit e , th e o w ner c a n, if h e's s u ffic ie ntly m otiv a te d, fin d o ut w ho
y o u a re . A fte r a ll, th e o nes a nd z e ro es th at m ake u p th e W eb s e ssio n h ave to b e a ble to fin d th eir w ay to th e r ig ht
5/6
p la ce , a nd th at p la ce is y o ur c o m pute r. T here a re a lo t o f m easu re s y o u c a n ta ke to d is g uis e th e b it s , a nd th e m ore
o f th em y o u u se , th e m ore th oro ughly th e b it s w ill b e d is g uis e d. F or in sta nce , y o u c o uld u se n etw ork a ddre ss
t r a nsla tio n to m ask y o ur a ctu al IP a ddre ss, s u bscrib e to a n a nonym iz in g s e rv ic e th at la unders b it s b y r e la yin g th em
f r o m o ne e nd o f th e e th er to th e o th er, u se a d if fe re nt IS P a cco unt fo r d if fe re nt p urp ose s, s u rf c e rta in s it e s o nly fr o m
p ublic k io sks, a nd s o o n. A ll o f th ese m ake it m ore d if fic u lt to d ete rm in e w ho y o u a re , b ut n one o f th em m ake it
i m possib le . D o y o u k n ow fo r c e rta in w ho o pera te s th e a nonym iz in g s e rv ic e ? M ayb e it 's th e s a m e p ers o n w ho o w ns
t h e w ebsit e y o u ju st v is it e d! O r w hat a bout th at in nocu ous w ebsit e y o u v is it e d y e ste rd ay, th at o ffe re d to m ail y o u a
f r e e $ 10 o ff c o upon? M ayb e th e o w ner is w illin g to s h are in fo rm atio n w it h o th er w ebsit e o w ners . If s o , th e s e co nd
w ebsit e o w ner m ay b e a ble to c o rre la te th e in fo rm atio n fr o m th e tw o s it e s a nd d ete rm in e w ho y o u a re . A nd
a nonym it y is e ve n le ss a ch ie va ble w hen y o u fa cto r in lo ca tio n d ata , w hic h is g ath ere d p erp etu ally b y m obile p hones
a nd o fte n e nough b y W eb s it e s, m appin g y o ur m ach in e’s IP a ddre ss to a r e al- w orld lo ca tio n w it h p re tty d ece nt
a ccu ra cy.
D oes th is m ean th at p riv a cy is a lo st c a use ? N ot a t a ll. G ove rn m ents a lo ng w it h p ublic a nd p riv a te e ntit ie s c o ntin ue
t o w re stle w it h h ow b est to b ala nce th e n eed fo r p ers o nal d ata p riv a cy w it h o th er c o nce rn s. W hat it m eans is th at th e
b est w ay fo r y o u to p ro te ct y o ur p riv a cy o n th e In te rn et is th e s a m e a s th e w ay y o u p ro te ct y o ur p riv a cy in n orm al lif e
— th ro ugh y o ur b ehavio r. R ead th e p riv a cy s ta te m ents o n th e w ebsit e s y o u v is it , a nd o nly d o b usin ess w it h th ose
w hose d ata -s h arin g p ra ctic e s y o u u nders ta nd a nd a gre e w it h . If s it e s y o u v is it a llo w y o u to d ete rm in e h ow a nd w it h
w hom in fo rm atio n a bout y o u w ill b e s h are d, le arn h ow to a dju st th ose s e ttin gs a nd c h eck y o urs r e gula rly . If y o u'r e
w orrie d a bout c o okie s, d is a ble th em . M ost im porta ntly , r e m em ber th at in fo rm atio n s h are d b y o r a bout y o u o nlin e is
o nly a s s a fe a s th e le ast p ro te ctiv e , le ast e nfo rc e d p riv a cy p olic ie s a nd s e ttin gs w it h w hic h it c o m es in to c o nta ct. B ut
i f it 's c o m ple te a nd to ta l a nonym it y y o u w ant, b ette r s ta rt lo okin g fo r th at c a ve .
L aw # 10: T e ch nolo gy is n ot a p an acea
T e ch nolo gy c a n d o s o m e a m azin g th in gs. R ece nt y e ars h ave s e en th e d eve lo pm ent o f e ve r-c h eaper a nd m ore
p ow erfu l h ard w are , s o ftw are th at h arn esse s th at h ard w are to o pen n ew v is ta s fo r c o m pute r u se rs , a nd s e rv ic e s th at
c h ange o ur e xp ecta tio ns fo r b oth , a s w ell a s a dva nce m ents in c ry p to gra phy a nd o th er s cie nce s. It's te m ptin g to
b elie ve th at te ch nolo gy c a n d eliv e r a r is k-fr e e w orld if w e ju st w ork h ard e nough. H ow eve r, th is is s im ply n ot r e alis tic .
P erfe ct s e cu rit y r e quir e s a le ve l o f p erfe ctio n th at s im ply d oesn 't e xis t, a nd in fa ct is n 't lik e ly to e ve r e xis t. T his is tr u e
f o r s o ftw are a s w ell a s v ir tu ally a ll fie ld s o f h um an in te re st. S oftw are d eve lo pm ent is a n im perfe ct s cie nce , a nd a ll
s o ftw are h as b ugs. S om e o f th em c a n b e e xp lo it e d to c a use s e cu rit y b re ach es. T hat's ju st a fa ct o f lif e . B ut e ve n if
s o ftw are c o uld b e m ade p erfe ct, it w ould n't s o lv e th e p ro ble m e ntir e ly . M ost a tta cks in vo lv e , to o ne d egre e o r
a noth er, s o m e m anip ula tio n o f h um an n atu re , a p ro ce ss u su ally r e fe rre d to a s s o cia l e ngin eerin g. R ais e th e c o st
a nd d if fic u lt y o f a tta ckin g s e cu rit y te ch nolo gy, a nd b ad g uys r e sp ond b y s h if tin g th eir fo cu s a w ay fr o m th e te ch nolo gy
a nd to w ard th e h um an b ein g a t th e c o nso le . It's v it a l th at y o u u nders ta nd y o ur r o le in m ain ta in in g s o lid s e cu rit y , o r
y o u c o uld b eco m e th e c h in k in y o ur o w n s yste m s' a rm or.
T he s o lu tio n is to r e co gniz e tw o e sse ntia l p oin ts . F ir s t, s e cu rit y c o nsis ts o f b oth te ch nolo gy a nd p olic y— th at is , it 's
t h e c o m bin atio n o f th e te ch nolo gy a nd h ow it 's u se d th at u lt im ate ly d ete rm in es h ow s e cu re y o ur s yste m s a re .
S eco nd, s e cu rit y is a jo urn ey, n ot a d estin atio n— it is n 't a p ro ble m th at c a n b e " s o lv e d" o nce a nd fo r a ll, b ut a
c o nsta nt s e rie s o f m ove s a nd c o unte rm ove s b etw een th e g ood g uys a nd th e b ad g uys. T he k e y is to e nsu re th at
y o u h ave g ood s e cu rit y a w are ness a nd e xe rc is e s o und ju dgm ent. T here a re r e so urc e s a va ila ble to h elp y o u d o th is .
T he T e ch net w ebsit e , fo r in sta nce , h as h undre ds o f w hit e p apers , b est p ra ctic e s g uid es, c h ecklis ts a nd to ols , a nd
w e'r e d eve lo pin g m ore a ll th e tim e. C om bin e g re at te ch nolo gy w it h s o und ju dgm ent, a nd y o u'l l h ave m ore e ffe ctiv e
s e cu rit y .
6/6
