posted by
sbisson at 08:41am on 14/02/2003
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png)
A good academic friend pointed out to me the regular meetings of Lonix, and last Tuesday's talk by Ross Anderson in particular.
I signed up, and
marypcb and I wandered along, to meet our friend and to here what promised to be an interesting discussion on the economics of security and bug fixing. It was. Perhaps a little light on the mathematics, but it highlighted an interesting application of thermodynamics and auction theory to security analysis - and with an interesting conclusion: that under ideal conditions there is little or no difference between open and closed source development models.
More details of the talk can be found on The Register here, and more on the fascinating topic of security economics can be found on Ross' web site here.
One thought that struck me was that as we look at component architectures, web services and the like, the economic models may need to be expanded to take into account options analysis - especially if at a security architecture level we are deliberately designing in honeypots and the like...
I signed up, and
![[livejournal.com profile]](https://www.dreamwidth.org/img/external/lj-userinfo.gif)
More details of the talk can be found on The Register here, and more on the fascinating topic of security economics can be found on Ross' web site here.
One thought that struck me was that as we look at component architectures, web services and the like, the economic models may need to be expanded to take into account options analysis - especially if at a security architecture level we are deliberately designing in honeypots and the like...
There are 4 comments on this entry. (Reply.)