The fad in computer security today is to create multiple insulated networks.
Imagine a house without a hall connecting the rooms. Imagine a house with no doors connecting adjacent rooms. Imaging the house having all its doors connecting to the exterior of the house. Imaging having to go outside the house to enter another room in the same house.
Get the picture? Pretty stupid design, huh? You wouldn't buy such a house would you? Yet, amazingly CIOs have swallowed the concept hook, line and sinker.
Let's think about it a little more. Why wouldn't you build a house this way?
- convenience - obviously annoying to have to go outside to enter the bathroom
- security - every time you leave the house you are exposed to the dangers outdoors
- cost - let's see, exterior doors are much more expensive than interior doors. How about all the keys?
We always come back to the issue of trust. What motivates CIOs to adopt complex security models is that they don't trust anyone. So, the natural progression is that you keep adding more security. Here it is:
You don't trust me - hire Joe to watch me
You don't trust Joe - hire Fred to watch Joe
You don't trust Fred - hire Sam to watch Fred
You don't trust Sam
Get the picture?
|