security professionals: the plumbers of trust · • but you trust a locksmith • so you fit in a...
TRANSCRIPT
![Page 1: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/1.jpg)
Security professionals: the plumbers of trust
Piotr Cofta
http://piotr.cofta.net
![Page 2: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/2.jpg)
(c) Piotr Cofta 2
We are the plumbers of trust
• What does a plumber do? • brings water from where it is abundant • delivers it where it is scarce
• What do we do? • bring trust from where it exists • deliver it where it is needed
WHAT THE !#*$? ...
![Page 3: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/3.jpg)
(c) Piotr Cofta 3
The lock and the key
• You do not have trust in your neighbourhood
• But you trust a locksmith • So you fit in a new lock
• You just imported some trust from the place where it is abundant (locksmith) to the place where it is missing (neighbourhood)
![Page 4: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/4.jpg)
(c) Piotr Cofta 4
Still not believing it?
• Firewalls • no trust in data source • but trust in the appliance
• Remote management • no trust in the user • but trust in the management software
• Signed software • no trust in the distribution channel • but trust in cryptography
![Page 5: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/5.jpg)
(c) Piotr Cofta 5
Shooting gallery
pragmatic plumber
Vespasian
heroic plumber
Mario
guerrilla plumber
Robert de Niro "Brazil"
sexy plumber
James Denton "Desperate Housewives"
![Page 6: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/6.jpg)
(c) Piotr Cofta 6
Why am I here?
• Enno invited me :) • Plumbers have to know about
• tools of their trade • water
• Most security merchants made their business selling you security tools
• I made my business knowing about “water” - i.e. about trust
• read Luhmann!
![Page 7: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/7.jpg)
(c) Piotr Cofta 7
If that's a excuse
Piotr Cofta PhD CISSP SIEEE Risk and Trust http://piotr.cofta.net
![Page 8: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/8.jpg)
(c) Piotr Cofta 8
For today
• What are we talking about • Canonical structures of trust • Heuristics of trust
![Page 9: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/9.jpg)
What are we talking about?
(defining trust without feeding the trolls)
![Page 10: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/10.jpg)
(c) Piotr Cofta 10
We are all experts in trust
Trust is ... a state of mind
Distinction Intention
Justification
'I know what is positive'
'I am dependent on others'
'I have reasons to justify my intention'
Realisation
'I want the positive future'
![Page 11: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/11.jpg)
(c) Piotr Cofta
negative fear
Risk is ...
11
We are all experts in trust
a state of mind
Distinction Intention
Justification
'I know what is positive'
'I am dependent on others'
'I have reasons to justify my intention'
(assets)
(vulnerabilities) (threats)
Realisation
'I the future'
![Page 12: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/12.jpg)
(c) Piotr Cofta
Trust is fashionable..
• Survival skill • those who do not 'get' trust, die • even banks (some of them)
• Commercial value • trust == x £$€.. • measurable benefits
• Foundation of security • especially information security • not the other way round
12
![Page 13: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/13.jpg)
(c) Piotr Cofta 13
Trust is, of course, subjective
• 'Your' trust is not always 'my' trust • What is a 'reasonable' trust is
continuously negotiated • There are some common best
practices • Sometimes even written down • Better follow them • Or you face extinction
![Page 14: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/14.jpg)
(c) Piotr Cofta 14
Trust is, of course, contextual
• Trust your doctor with your surgery, not with fixing your car
• Trust your banker with your money (?), not with your life
• Trust a child with a penny, but not with a pound
• Trust yourself if you are an expert, not if you think you are one
![Page 15: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/15.jpg)
(c) Piotr Cofta 15
Trust, of course, is not transitive
• Trust your friend with fixing a computer security issue
• does NOT mean
• Trust your friend with knowing a reputable information security professional
FOAF
Trust is, of course, context-transitive. But that is a different story.
![Page 16: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/16.jpg)
(c) Piotr Cofta 16
Trust, of course, changes
• I trusted you, but not anymore • I did not trust you before, but now I do
• There is no exact formula • "first impression stays" • "last impression weights the most" • "it is the frequency that counts"
4376-1332-5031-8875-7157
![Page 17: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/17.jpg)
(c) Piotr Cofta 17
Trust, of course, is not reputation
• I trust you because of your reputation • I trust you despite your reputation
• Reputation • collective assessment of trustworthiness • invitation to trust • control of one's behaviour • long-lasting, valuable asset 43
76-1
332-
5031
-887
5-71
57
![Page 18: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/18.jpg)
Canonical structures of trust
(structuring the piping of trust)
![Page 19: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/19.jpg)
(c) Piotr Cofta 19
Why do you trust?
• 'Just because I do' is not good enough
• Trust is not about feelings and fluff
• Trust has a rational structure • But it is often hidden • Like plumbing is hidden in the walls
![Page 20: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/20.jpg)
(c) Piotr Cofta 20
Canonical structures
• Even the most complex plumbing has its logic
• Five canonical components of the structure of trust (yours, mine, everybody's)
• Yes, there is a formal notation; • No, we will not go into it.
4376
-133
2-50
31-8
875-
7157
![Page 21: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/21.jpg)
(c) Piotr Cofta 21
1. Control-based trust
(1) "I can trust you" (2) "Because there is a control that enforces your behaviour" (3) "And I trust this control" • "Trust exchange" • Is this a real trust?
• Security practice: controls
trust
trust
4376-xxxx-xxxx-xxxx-xxxx
![Page 22: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/22.jpg)
(c) Piotr Cofta 22
2. Authoritative trust
• "I trust you because the authority said that I can trust you, and I trust this authority"
• Institutional trust • Symbols of trust (certificates, money) • Institutional reputation
• Security practice: assurance
trust
trust
xxxx-1332-xxxx-xxxx-xxxx
![Page 23: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/23.jpg)
(c) Piotr Cofta Troopers 2012 (c) Piotr Cofta 23
3. Knowledge-based trust
• I trust you because I know you and I trust myself
Root of trust #1: myself
• Interpersonal trust • Personal trust assessment • Security: personal judgement
trust
xxxx-xxxx-5031-xxxx-xxxx
![Page 24: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/24.jpg)
(c) Piotr Cofta 24
4. Consensus-based trust
• I trust you because everybody else seem to trust you
Root of trust #2: the society
• Safety in numbers (like lemmings) • Social consensus • Security: best practice
trust
xxxx-xxxx-xxxx-8875-xxxx
![Page 25: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/25.jpg)
(c) Piotr Cofta 25
5. Policy-based trust
• I trust you because the policy says I should trust you
Root of trust #3: CEO
• Works only in closed systems (e.g. company), not in the world society
• Security: trusted systems trust
xxxx-xxxx-xxxx-xxxx-7157
![Page 26: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/26.jpg)
(c) Piotr Cofta
Firewall
• I could not trust the Internet traffic, so I installed a firewall from a reputable company that my friend recommended.
26
I know my friend This company has been recommended by a friend The traffic is being controlled I can trust the traffic
trust
![Page 27: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/27.jpg)
(c) Piotr Cofta
New hire
• I feel safe as we have just hired a new certified security manager
27
The policy says that we can trust a person with recognised certification
Everybody trust the certification body
The certification body certified the new hire
![Page 28: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/28.jpg)
(c) Piotr Cofta
Padlock - the theory
28
the browser controls security
DNS controls naming
I know IE and I can trust it
everybody trusts DNS
I know my friend
My friend picked this computer
I have an AV
from a reputable company, trusted by all
CA controls keys
everybody trusts CA
limits of bounded rationality
![Page 29: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/29.jpg)
(c) Piotr Cofta
Padlock - the practice
29
I know my friend
My friend said that's all right
![Page 30: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/30.jpg)
(c) Piotr Cofta
Trust seal
30
Everybody trusts the issuer
The issuer says that this site is trustworthy
The issuer controls certification
I trust the web site
Oops.. I trust the web site because .. I trust the web site
The web site controls its content
![Page 31: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/31.jpg)
Heuristics of trust
(I trust because I know .. or..
structuring the green pipe)
![Page 32: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/32.jpg)
(c) Piotr Cofta 32
Knowledge-based trust
• 'I know' can be a very poor indicator • or a very good one
• People do not 'do' perfect logic • bounded rationality
• People 'do' survival heuristics • just good enough to muddle through
• Security is not an abstract game • it is to assure survival over competitors
![Page 33: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/33.jpg)
(c) Piotr Cofta
Heuristics of trust
• Trusting is not an exact science • Some heuristics are more popular
than others
Three-by-three matrix
• Not an exhaustive list • Never an exhaustive list
33
![Page 34: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/34.jpg)
(c) Piotr Cofta 34
Classical triad
• Competence • He is able to help me, he is a
professional • Benevolence
• He seems to be a good man, he will not leave me alone
• Continuity • He is really committed, his future career
is at stake
![Page 35: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/35.jpg)
(c) Piotr Cofta 35
Sharing triad
• Shared background • We are from the same school so I
understand him • Shared benefits
• He is as much dependent on me as I am on him
• Shared values • We both observe the same fundamental
values
![Page 36: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/36.jpg)
(c) Piotr Cofta
Social triad
• Familiarity • He is always on time, so he will be on
time this time • Stereotyping
• Doctors are trustworthy, and he is a doctor
• Similarity • I was in a similar situation before and it
worked for me
36
4376
-133
2-50
31-8
875-
7157
![Page 37: Security professionals: the plumbers of trust · • But you trust a locksmith • So you fit in a new lock • You just imported some trust from the place where it is abundant (locksmith)](https://reader033.vdocument.in/reader033/viewer/2022042407/5f210c08119f91624a790141/html5/thumbnails/37.jpg)
Thank you
Piotr Cofta
http://piotr.cofta.net (c) JC