Sensible Authentication

  • Authors:
  • Bruce Schneier

  • Affiliations:
  • Counterpane Internet Security

  • Venue:
  • Queue - Game Development
  • Year:
  • 2004

Quantified Score

Hi-index 0.01

Visualization

Abstract

The problem with securing assets and their functionality is that, by definition, you don't want to protect them from everybody. It makes no sense to protect assets from their owners, or from other authorized individuals (including the trusted personnel who maintain the security system). In effect, then, all security systems need to allow people in, even as they keep people out. Designing a security system that accurately identifies, authenticates, and authorizes trusted individuals is highly complex and filled with nuance, but critical to security.