Schneier on Security

David Donahue • April 29, 2006 2:03 PM

Cute cartoon, but in reality of course, they would have simply broken into a neighbor's garbage.

There is a value to overt overkill in a front line defence, deterrence. However this doesn't work if you are being specifically targeted only if you are "one of a pack".

That's why these impressive front line defences work against most burglars and muggers, but do not work against assassins or (for countries) terrorists.

Assassins will not choose another victim because it's convenient or easier.

Terrorists will not choose another country/target group because some points of their defence is well/over defended.

This is what comes from using simple personal analogies (burglars/muggers) for security versus actually thinking through the attackers complex motivations and likely actions to achieve what their goals may be.

Sun Tzu said (from memory) "know yourself and know your opponent, and you will be victorious in every battle".

It would seem to me that if you choose to ignore your actual vulnerabilities and don't wish to think about what your opponent will likely do, you are doomed to failure.

Sadly there is a lot of this going on these days and we are fortunate that our attackers aren't pressing the attack locally.