Information Security: Science, Pseudoscience, and Flying Pigs

  • Authors:
  • R. Schell

  • Affiliations:
  • -

  • Venue:
  • ACSAC '01 Proceedings of the 17th Annual Computer Security Applications Conference
  • Year:
  • 2001

Quantified Score

Hi-index 0.00

Visualization

Abstract

The state of the science of information security isastonishingly rich with solutions and tools toincrementally and selectively solve the hard problems. Incontrast, the state of the actual application of science,and the general knowledge and understanding of theexisting science, is lamentably poor. Still we face adramatically growing dependence on informationtechnology, e.g., the Internet, that attracts a steadilyemerging threat of well-planned, coordinated hostileattacks. A series of hard-won scientific advances givesus the ability to field systems having verifiable protection,and an understanding of how to powerfully leverageverifiable protection to meet pressing system securityneeds. Yet, we as a community lack the discipline,tenacity and will to do the hard work to effectively deploysuch systems. Instead, we pursue pseudoscience andflying pigs. In summary, the state of the science incomputer and network security is strong, but it suffersunconscionable neglect.