| Sumario: | The article presents information on how human intuition influences the security design of complex systems. Computer engineers build the virtual walls of computing centers thicker and higher, while attackers exercise brilliantly diabolical attacks on weak links, turning systems against themselves in an arms race that has gone on for as long as computers have communicated through networks. A new class of attack--the client-side attack--has emerged increasingly popular and dangerous. With the rise of this client-side attacks, a flaw emerges in the old model, despite avoiding a direct connection to the outside, users might still be attacked by the very services they have requested. A new attack vector has been designed in which users are transformed into a protected interior of the network. Securing a system enforces pressure on attackers, forcing changes in their formerly successful behavior and previously unexplored attack patterns to take advantage of still unprotected resources. Security designs must recognize that the enhancements are the driving force behind new intrusion techniques.
|