Free Newsletters
Technology & Business Daily

InfoWorld
Log-in | Register

SECURITY ADVISER 

Internet security: What will work

Here's a radical plan for making the Internet safe for every legitimate user


Because approved users can still do bad things using approved programs, it's essential that network packets be authenticated from source to destination, and traceable back to their originating point. This will prevent a user from creating malware and sending it to another location, or prevent a malicious user from using another innocent user's computer to do the same. In my Internet world, if the bad guy "borrowed" someone else's computer, we'd always be able to trace the perpetrator back to their lair.

Routers and networks that carry our information from point A to point B would also be authenticated and their unique identities added to each passed packet. It wouldn't be as slow as you think -- network devices are working at electric speeds (the speed of light minus minor, unavoidable impedances). Tacking on a unique, authenticable identifier will not add that much overhead.

The downside
Unfortunately, my brilliant idea (probably already thought of by a hundred other great minds decades ago) requires a complete rebuild of every involved component: hardware, software, and user logons. The good thing is that most of the technology and smarts to make it happen already exist. A tweak here or there is all that is needed...well, that and universal cooperation and planning.

Because we like to do things in evolution vs. revolution, my model proposes "rings of trust," where differing levels of trust can be defined by each participating party. Users and computers not up on the latest computer security checks will be assigned a lower level of trust and have to go through additional (traditional) layers of security checks (anti-virus, anti-spam, and so on). Traffic arriving from users and computers with higher levels of trust will go directly to their intended destination.

Yes, even this system will be hacked, but it will fix the discovered problem, and all malicious exploits of that vulnerability are prevented at once. This beats our current game of "whack-a-mole" security defense.

If you don't like my plan, stay with the current status quo or make up your own plan. Stay on your version of the Internet and compute away. I'm hoping that someone powerful enough, a consortium of enough interested people and companies, comes together to make my vision a reality. Dare to dream.

And if you can make up a better solution, the world should beat a path to your door. Until then I'll just continue to believe my solution is the only one.

Roger A. Grimes is contributing editor of the InfoWorld Test Center. He also writes the Security Adviser blog and the Security Adviser column.
« PREVIOUS PAGE | 1 | 2 


Talkback:

commentPost a Comment

 

MOST COMMENTS

 
 





Virtualization: A Step by Step Approach to Success
Your virtual machines can be up and running in a matter of minutes. HP and Citrix have integrated XenServer with HP ProLiant servers and management tools, powered by hardware-assisted Intel Virtualization Technology to enable high- performance, cost-savings solutions for server consolidation and disaster recovery. Sponsor: HP

»  Click here to view this Webcast
  Zombie PCs Are Attacking Your LAN
A recent study showed that malware-infected zombie PCs are now a bigger threat to ISPs and Web infrastructure than DoS attacks. As this brand new IT Strategy Guide explains, an increased use of peer-to-peer techniques by the attackers has made it harder to fight back. Download now, compliments of Verio:

»  Click here to download now

- Special Advertising Partners -
WHITE PAPERS
 

» Technology White Papers Library

Technology White Papers by Topic

Technology White Papers E-mail Alert

Find out when the latest white paper is available:
 
 
INFOWORLD MARKETPLACE
 
» BUY A LINK NOW
 
 

Video

 
 
 

Podcasts

 
 
 

 

Columnists

 
 
 

Resource Center


Ads by techwords beta  [See your link here]
 




Sponsored Technology Links

 
 
 HOME  NEWS  BLOGS  PODCASTS  VIDEOS  TECHNOLOGIES  TEST CENTER  EVENTS  CAREERS   About | Advertise | Awards | RSS | Contact Us 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy, Terms of Service.
All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses,
phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

CIO :: ComputerWorld :: CSO :: Demo :: GamePro :: Games.net :: IDG Connect :: IDG World Expo
Industry Standard :: IT World :: JavaWorld :: LinuxWorld :: MacUser :: Macworld :: Network World :: PC World :: Playlist