A personal blog by Khürt Williams, with imagery, and inchoate ramblings on coffee, beer, and geekery.
Web Gateway Security
Grant Murphy – Director, Web Gateway Security
Negative security model ( known bad ). Must know about all possible attack vectors. Not possible.
Reference: Metasploit, HD Moore, VoMM.
Positive security model. Intent and reputation model. Something is good because of its known intent and reputation. Real world example. Credit score. If I have a reputation for defaults or late payments then I will get a lower credit score than someone who pays bill on time or…