PPRuNe Forums - View Single Post - Malaysian Airlines MH370 contact lost
View Single Post
Old 21st Mar 2014, 14:03
  #6934 (permalink)  
25F
 
Join Date: Mar 2000
Posts: 350
Likes: 0
Received 6 Likes on 6 Posts
"security through obscurity"

Re: "Please Do Not Reveal Critical Security Info".

Coming from the IT world, it is always interesting to me to see these attitudes, which we refer to as "security through obscurity", and consider to be not-very-secure.

In designing secure systems in the IT world we (most of us) take one thing for granted - that the "attacker" *does* have full knowledge of how the system operates - everything apart from those *actual* secrets (e.g. passwords) that protect the system.

Moving on from that, it is considered beneficial (by many) to expose the workings of any system to full public scrutiny, on the basis that any flaws will be more likely to be spotted.

Whether or not that is an appropriate model for the aviation world is a different matter.

But I *will* observe that these "operational secrets" are not going to be hard to come by for a well-funded adversary.
25F is offline