Feeds

More tech fails to exorcise security risks

Complexity = Risk, deal with IT

Choosing a cloud hosting partner with confidence

Current IT systems are inherently insecure and growing complexity will simply increase these risks, a leading academic has warned.

Users should rebel and demand vendors compensate them for security foul-ups, said pugnacisous Professor Klaus Brunnstein of the University of Hamburg

Brunnstein told delegates to an IT security conference in London on Wednesday that attempting to protect against IT risks - such as hacking attacks - by increasing the complexity of systems is futile. "That would be like trying to expel the devil with Beelzebub," he said.

The present wave of IT security incidents is caused by inherently insecure assumptions, including overly complex systems. The interoperation of these systems with other insecure technologies magnifies the problem, the applied informatics academic argued.

He said more secure technologies will only be developed after a fundamental rethink involving building security into applications rather than adding it as an afterthought. Beyond saying that applications shouldn't delete valuable data when they failed, Brunnstein failed to elaborate on this key point preferring instead to criticise suppliers for resisting change.

Brunnstein called on user groups to rebel and lobby for customer protection laws and compensation for security failures. "Manufacturers must be made to pay for damages. Certainly Microsoft has made enough money to do so," Brunnstein said.

The professor made his comments during a keynote presentation at the Gartner IT Security Summit conference in London on Wednesday. ®

Internet Security Threat Report 2014

More from The Register

next story
FYI: OS X Yosemite's Spotlight tells Apple EVERYTHING you're looking for
It's on by default – didn't you read the small print?
Russian hackers exploit 'Sandworm' bug 'to spy on NATO, EU PCs'
Fix imminent from Microsoft for Vista, Server 2008, other stuff
Edward who? GCHQ boss dodges Snowden topic during last speech
UK spies would rather 'walk' than do 'mass surveillance'
Microsoft pulls another dodgy patch
Redmond makes a hash of hashing add-on
'LulzSec leader Aush0k' found to be naughty boy not worthy of jail
15 months home detention leaves egg on feds' faces as they grab for more power
China is ALREADY spying on Apple iCloud users, claims watchdog
Attack harvests users' info at iPhone 6 launch
Carders punch holes through Staples
Investigation launched into East Coast stores
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.