The six dumbest ideas in computer security

Sept. 13, 2005
Marcus Ranum suggests that these dumb ideas are the fundamental reasons why all that money you spend on information security is going to be wasted, unless you somehow manage to avoid them.

THE IT INDUSTRY spends a huge amount of money on security -- and yet worms, spyware, and other relatively mindless attacks are still able to create massive havoc. Why? Marcus Ranum suggests that we've all been spending far too much time and effort on provably ineffective security measures. It may come as a surprise that anti-virus software, penetration testing, and user education are three of The Six Dumbest Ideas in Computer Security.

READ MORE