Intellectual Frontiers

Zero Security Theatre

Patterns and anti-patterns

Patterns are practices that help when tested. Anti-patterns are common, usually well-intentioned practices that create paperwork without improving the result.

Patterns

  • Attach an outcome test to every security purchase

    Make a named production test a condition of acceptance and renewal. Run the attack behaviour, record what the control changed, and use the result in the buying decision.

    Under The dangers of security theatre

Anti-patterns

  • Reporting agent coverage as security posture

    A coverage percentage measures software installation. It carries no information about whether anything is detected, contained, or recovered, and it rises fastest on the systems that matter least.

    Under The dangers of security theatre