Information Security A Larger Perspective

1
Information Security A Larger Perspective

• QUT Infosys IIIT-B Workshop
• S Sadagopan (ss_at_iiitb.ac.i
• February 21, 2005

2
Overview

• End user view
• System Administrator view
• IT Management view
• Organization view
• IT vendor view
• Community view
• Security in right perspective

3
End User View

• Privacy (Health record)
• Loss of data (Disk crash)
• Unintended data (SPAM)
• Malfunctioning (PC crash)
• Reduced performance (slow Internet)
• Willing to pay one time, small amount, not
  willing to administer
• Levels change perception (CEO, Secretary)

4
System Administrator View

• Data protection
• Network performance
• Web server sneak-in
• Illegal user access
• System downing
• Physical damages

5
IT Management View

• Planned Vs Delivered Security
• User education
• Disaster management
• On cost, on time

6
Organization View

• Near-zero cost, near infinite security
• Not wanting to get into technical details
• Insurance and assurance

7
IT Vendor View

• Security product vendors
• Generic, platform neutral product, affordable
  cost to buyers, significant revenue to
  shareholders
• Other products vendors
• Build security into hardware, infrastructure
  (OS, DBMS), middleware and application

8
Community View

• How to cope with irritation, injury, imminent
  disaster
• Clarity of roles of vendors, consultants, IT
  managers, Government.. In a globally connected
  environment

9
Security in right perspective

• Real security
• Perceived security
• Communicated security
• Managed security
• Metrics, measurement, rating, authorities
• Security ecosystem
• Views differ dramatically from perspective
• Techniques, technologies, solutions, offerings,
  policy form natural layers

10
Feedback

• Questions, comments, feedback
• ?