That is a goal of the government. EO 14028 makes the biden administration the first to take cybersecurity seriously. The problems are two fold:
- An attacker only has to get lucky once. You have to do the right thing everytime.
and
- It's not clear you didn't do the right thing until it's too late.
It's possible to a much better job of cybersec than we're doing today, but everything today is such a hodgepodge of "It works, it barely works, onto the next thing" that it's hard to do so. Developers can barely be expected to write documentation, getting people to routinely do static and dynamic analysis on their code is going to be a high bar to get over.
Comments
That is a goal of the government. EO 14028 makes the biden administration the first to take cybersecurity seriously. The problems are two fold:
- An attacker only has to get lucky once. You have to do the right thing everytime.
and
- It's not clear you didn't do the right thing until it's too late.
It's possible to a much better job of cybersec than we're doing today, but everything today is such a hodgepodge of "It works, it barely works, onto the next thing" that it's hard to do so. Developers can barely be expected to write documentation, getting people to routinely do static and dynamic analysis on their code is going to be a high bar to get over.