Security and the Open Source Model Michael H. Warfield Internet Security Systems Inc mhw@wittsend.com Atlanta Linux Showcase October 15, 1999
Table of Contents
Security and the Open Source Model Michael H. Warfield Internet Security Systems Inc mhw@wittsend.com Atlanta Linux Showcase October 15, 1999
Notes for Note Takers
Disclaimer on Terminology
Objective
Introduction
The Skeptics
Depending on Secrecy
Secrecy plus Security
The Nature of Common Sense
The Nature of Secure Systems
Myths of security and open source
No Source Control
No one "really" looks at the source
The source can be trapdoored
Hackers will find the holes
Open source contributes to quality
Peer review and code review
Secure coding techniques
Commercial Advantage Issues
Fear of the Unknown
Under Fire
Slide 22
An Attack Becomes Known
Slide 24
Trojan Horse or Sabotage?
Slide 26
Conspiracies and FUD
FUD and PGP Keys
A FUD Attack?
Slide 30
Responding to FUD
Our Task
Eternal Vigilance
Conclusion
Credits
Security and the Open Source Model Michael H. Warfield Internet Security Systems Inc mhw@wittsend.com http://www.wittsend.com/mhw/1999/oss_security/
View Text Version