[Model-t] What are we trying to protect

[Bret Jordan <[e-mail]>]

Protection of end users’ data

Protection of an organization’s data

Protection of devices owned by an end user or an organization 

Protection of network equipment 

Protection of SCADA system

Protection of critical infrastructure 

Protection of IoT and soon to be released 5G devices 

Protection of cost optimized controllers


The problem we have had in the past is we want to call this one of the following, but each one does not encompass the full picture.
1) Computer security
2) Data security 
3) Information security 
4) Communication security 
5) Network security 
6) Application security 
Etc, etc, 

So if you way we are just dealing with communication security or information security we are missing a significant piece of the pie. 


Thanks,
Bret
PGP Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050
"Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."

>> 
> Reading this thread, I think that we are missing a step. We cannot
> define attacks without defining first the assets that need to be
> protected. Different actors probably have different views on that, such as:
> 
> 1) Continuous operation of the Internet
> 
> 2) Continuous operation of a specific Internet provider
> 
> 3) Continuous availability of an Internet Service
> 
> 4) Continuous connectivity for a given user
> 
> 5) Protection of databases used by services and enterprises
> 
> 6) Protection of the personal data of users
> 
> Do we have agreement on what we are trying to protect?
> 
> -- Christian Huitema
> 
> 
> -- 
> Model-t mailing list
> [e-mail]
> https://www.iab.org/mailman/listinfo/model-t