Secrets and Lies¶
Schneier, B. (2000). Secrets and Lies: Digital Security in a Networked World. John Wiley & Sons.
Cited by¶
3 citations across 3 artifacts.
Each citation links to the sentence it supports in the citing article.
Primes¶
- Asymmetric Attack Defense Cost
- In cybersecurity, the defining substrate, an attacker needs one working exploit on one path while a defender must close every vulnerability on every path, so the cost ratio strongly favors the attacker for any non-trivial attack surface — the defender's-dilemma reasoning at the heart of security economics.
This sourceArticulates the defender's dilemma — the attacker needs one working path while the defender must close every vulnerability — as a structural cost asymmetry in security.
- In cybersecurity, the defining substrate, an attacker needs one working exploit on one path while a defender must close every vulnerability on every path, so the cost ratio strongly favors the attacker for any non-trivial attack surface — the defender's-dilemma reasoning at the heart of security economics.
- Containment
- Red Teaming In Strategy
- The structural insight the prime captures is the asymmetry of adversarial search: normal-use testing exercises the paths users are expected to take, but an attacker willing to spend effort \(X\) will probe the paths no one intended, so a defender who tests for $100X$ of normal use still fails to cover the one unintended path the attacker finds.
This sourceArgues the asymmetry of adversarial search: a motivated attacker probes the unintended-use paths that exhaustive normal-use testing never covers ('only the first attacker has to be skilled').
- The structural insight the prime captures is the asymmetry of adversarial search: normal-use testing exercises the paths users are expected to take, but an attacker willing to spend effort \(X\) will probe the paths no one intended, so a defender who tests for $100X$ of normal use still fails to cover the one unintended path the attacker finds.
Verification¶
This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.
Links previously used in the corpus¶
Before the registry existed this work was also linked 2 other ways.
- https://archive.org/details/secretsliesdigit0000schn_n2e3 ×1
- https://www.worldcat.org/oclc/44423754 ×1
Registry ID ref:6cc3a85d1199 · see in the full table