[prev in list] [next in list] [prev in thread] [next in thread] 

List:       full-disclosure
Subject:    Re: [Full-disclosure] Info about attack trees
From:       Defence in Depth <defenceindepth () gmail ! com>
Date:       2012-05-29 4:22:38
Message-ID: CAL3K1gbQ4v4aAYD0ZRM_-L7PsFLf26zwf6z2O6SiD1ERcOPZKg () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


I think this quote sums it up well:

"Hacking is ... not a day job or a semi-ordered list of instructions found
in a thick book." - Anthony Bunyan (Shellcoder's Handbook)

Predetermining an attack path or even representing every possible way an
entity can be attacks is just not possible. There are potentially an
infinite number of permutations one could take to compromise a system.
Formalising such a thing would not accurately represent the real world; it
would merely display a subset of possible attack vectors.

This is a good example of where someone has made something from nothing
(and would have been very difficult to have predicted/formalised):
http://xs-sniper.com/blog/2010/12/17/will-it-blend/


Regards,

Patrick Dunstan
www.defenceindepth.net

[Attachment #5 (text/html)]

I think this quote sums it up well:<div><br></div><div>&quot;Hacking is ... not a day job or a \
semi-ordered list of instructions found in a thick book.&quot; - Anthony Bunyan \
(Shellcoder&#39;s Handbook)</div><div><br></div> <div>Predetermining an attack path or even \
representing every possible way an entity can be attacks is just not possible. There are \
potentially an infinite number of permutations one could take to compromise a system. \
Formalising such a thing would not accurately represent the real world; it would merely display \
a subset of possible attack vectors. </div> <div><br></div><div>This is a good example of where \
someone has made something from nothing (and would have been very difficult to have \
predicted/formalised):</div><div><a \
href="http://xs-sniper.com/blog/2010/12/17/will-it-blend/">http://xs-sniper.com/blog/2010/12/17/will-it-blend/</a>
 </div><div><br></div><div><br></div><div>Regards,</div><div><br></div><div>Patrick \
Dunstan</div><div><a \
href="http://www.defenceindepth.net">www.defenceindepth.net</a></div><div><br></div>



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

[prev in list] [next in list] [prev in thread] [next in thread]