◀ security
 

Obscurity is a Valid Security Layer

obscurity

Many of us are familiar with a concept know as Security by Obscurity. The term has negative connotations within the infosec community—usually for the wrong reason. There's little debate about whether security by obscurity is bad; this is true because it means the secret being hidden is the key to the entire system's security.When added to a system that already has decent controls in place, however, obscurity is absolutely not a bad thing. In fact, when done this way, obscurity can be a strong addition to an overall security posture.As mentioned above, the question of whether obscurity is good or bad reduces to whether it's being used a layer

Go To Source
comments powered by Disqus
29 Oct
Andrew Waite @Infosanity
RT @DanielMiessler: Yes, Obscurity is a Valid Security Control | http://t.co/IXo5h7zzKW #infosec
29 Oct
Security Generation @securitygen
RT @DanielMiessler: Yes, Obscurity is a Valid Security Control | http://t.co/IXo5h7zzKW #infosec