Broadcasts.com - "EP 107: SDP 6: Fail-safe Defaults" (Your Cyber Path: How to Get Your Dream Cybersecurity Job)

Business
RELATED

EP 107: SDP 6: Fail-safe Defaults

Published: Oct. 13, 2023, 10 a.m.

https://www.yourcyberpath.com/107/

\n\n

In this episode, we go back to the Security Design Principles series, this time we are discussing Failsafe Defaults.

\n\n

Failsafe defaults simply means that the default condition of a system should always be to deny.

\n\n

An example of a failsafe default is the security reference monitor (SRM) that has been implemented in Windows operating systems since Windows NT. The SRM prevents access to any actions like logging on, accessing a file, or printing something unless the user presents a token to prove that they should have access to a file or an action.

\n\n

There will always be two choices for failsafe defaults - to fail close or to fail open. The DoD and government organization side will tend toward using the fail close option, while the commercial and more streamlined companies will definitely prefer to fail open.

\n\n

There will always be this challenge between security and operations. More security means less operations and more inconveniences, while prioritizing operations means that security will not be the best. It all depends on your organization and its goals.

\n\n

Understanding failsafe defaults and other security design principles will help you become a better analyst and produce more secure, robust, and functional systems.

\n\n

What You\u2019ll Learn

\n\n

\u25cf\xa0\xa0\xa0\xa0What is Failsafe Defaults?

\n\n

\u25cf\xa0\xa0\xa0\xa0What are some examples for Failsafe defaults?

\n\n

\u25cf\xa0\xa0\xa0\xa0 What is the Security Reference Monitor?

\n\n

\u25cf\xa0\xa0\xa0\xa0\xa0What is the difference between failing close and failing open?

\n\n

Relevant Websites For This Episode