Assets, Vulnerabilities, Threats, and Risks: What Type Security Is Right For You?
In the FileMaker Pro developer community there is a general lack of clear understanding about the need for the correct type of security in FileMaker Pro solutions.
There is too much focus on passwords and not enough focus on the protection of assets and the mitigation of adverse impacts of breaches. There is also too much focus on the creation of “custom” “security” systems and not enough focus on identifying threats and the risks of their occurring. There is too much complaining about how “hard” it is to have good security and not enough appreciation about the adverse impact of having the wrong type of security.
As a result of all this, at the upcoming FileMaker Developer Conference in Phoenix I will be conducting a special session:
Assets, Vulnerabilities, Threats, and Risks:
What Type Security Is Right For You?
Tuesday, July 15th 2008
11:15 AM to 12:30 PM
Sonoran Ballroom H
This session will feature a discussion of how to determine the right type of security for your solution. It is based on a set of circumstances specific to your individual solution, but common to all FileMaker Pro solutions.
All assets are subject to threats that can exploit vulnerabilities that, in turn, can breach their Confidentiality, Integrity, and Availability. The level of adverse impact of such a breach varies situation by situation as do the risks of those threats’ occurring and the prevalence of threat agents that can trigger the exploits.
Security then must focus on closing vulnerabilities, on blocking threat agents, and on mitigating adverse impact of breaches. And a great many FileMaker Pro solutions take no cognizance whatsoever of this key requirement.
So, if you are at the Develop Conference, feel free to stop by to listen, to contribute, or to debate this very important subject.
—–
Steven H. Blackwell
Platinum Member, FileMaker Business Alliance
Partner Member, FileMaker Solutions Alliance (1997-2007)
FileMaker 9 Certified Developer
FileMaker 8 Certified Developer
FileMaker 7 Certified Developer
FileMaker Authorized Trainer