Submitted by Security Renegades on Wed, 20070815 23:14.

1
Submitted by Security Renegades on Wed,
2007-08-15 2314. I was just interviewed by
a local news station about a story they were
doing on daring hackers that have started
advertising their abilities to destroy a persons
life for as little as 20 per month. Apparently
the deal goes something like this you make a
deal with a hacker to destroy somebodys life by
signing them up online and the hacker will ensure
the target cant get a good job, cant apply for
credit cards, will be denied for loans, etc.
hacker must return to the scene monthly to
determine if the targets life is still truly
ruined
Innovative business subscription model
2
The sad truth
Usability Convenience
Unbreakable Security
3
Verification Validation
Did we build it right?
VERIFICATION
Test plan(s)
Software
Engineering
SQA
User requirements
Did we build the right thing?
Software System
VALIDATION
Acceptance tests
User manual
User
Customer
4
Things we usually dont think about
Accessibility - disabled people ICT security
awareness Information security is not IT issue
ONLY Cost of security
5
Cost of Security?
Internal Failures External Failures
Cost of Nonconformance Cost of Conformance
Prevention Assessment
6
Examples
Integrated Security Management,
Standards E-administration, document
management E-health E-procurement, e-bidding,
e-signatures
7
George Sharkovgesha_at_esicenter.bg European
Software Institute Center Bulgariawww.esicenter
.bg