Secrets and Lies¶
Schneier, B. (2000). Secrets and Lies: Digital Security in a Networked World. John Wiley & Sons.
Cited by¶
3 citations across 3 artifacts.
Each citation links to the sentence it supports in the citing article.
Primes¶
- Asymmetric Attack Defense Cost
- In cybersecurity, the defining substrate, an attacker needs one working exploit on one path while a defender must close every vulnerability on every path, so the cost ratio strongly favors the attacker for any non-trivial attack surface — the defender's-dilemma reasoning at the heart of security economics.
This sourceArticulates the defender's dilemma — the attacker needs one working path while the defender must close every vulnerability — as a structural cost asymmetry in security.
- In cybersecurity, the defining substrate, an attacker needs one working exploit on one path while a defender must close every vulnerability on every path, so the cost ratio strongly favors the attacker for any non-trivial attack surface — the defender's-dilemma reasoning at the heart of security economics.
- Containment
- Red Teaming In Strategy
- The structural insight the prime captures is the asymmetry of adversarial search: normal-use testing exercises the paths users are expected to take, but an attacker willing to spend effort \(X\) will probe the paths no one intended, so a defender who tests for $100X$ of normal use still fails to cover the one unintended path the attacker finds.
This sourceArgues the asymmetry of adversarial search: a motivated attacker probes the unintended-use paths that exhaustive normal-use testing never covers ('only the first attacker has to be skilled').
- The structural insight the prime captures is the asymmetry of adversarial search: normal-use testing exercises the paths users are expected to take, but an attacker willing to spend effort \(X\) will probe the paths no one intended, so a defender who tests for $100X$ of normal use still fails to cover the one unintended path the attacker finds.
Verification¶
Does it exist? Confirmed. This work's DOI resolves to a registered record, which fixes its identity. That is all it fixes.
Does it back the claim? Not recorded. Neither this nor any other of the 3 citations of this work carries a recorded support check.
Support is checked per citation rather than per work — the same source can be cited soundly in one article and wrongly in another. Per-citation recording began recently, so a citation with no recorded check is a gap in the record rather than evidence it went unchecked.
See how references were verified.
Links previously used in the corpus¶
Before the registry existed this work was also linked 2 other ways.
- https://archive.org/details/secretsliesdigit0000schn_n2e3 ×1
- https://www.worldcat.org/oclc/44423754 ×1
Registry ID ref:6cc3a85d1199 · see in the full table