Reply to thread

Message

<blockquote data-quote="509322" data-source="post: 583871">It ain&#039;t wisdom, but just differing perspectives\definitions of default deny.There is strict (absolute) blocking and conditional blocking.&nbsp; Two different levels of default deny.Depending upon the conditional policies, it might or might not result in a massacred system.Not all conditional default deny are created equally.&nbsp; Some are more or less restricted default allow.From Security Software Engineering:1. Default deny - &quot;Everything, not explicitly permitted, is forbidden&quot;Improves security at a cost in functionality.This is a good approach if you have lots of security threats.2. Default permit - &quot;Everything, not explicitly forbidden, is permitted&quot;Allows greater functionality by sacrificing security.This is only a good approach in an environment where security threats are non-existent or negligible.</blockquote>

[QUOTE="509322, post: 583871"] It ain't wisdom, but just differing perspectives\definitions of default deny. There is strict (absolute) blocking and conditional blocking. Two different levels of default deny. Depending upon the conditional policies, it might or might not result in a massacred system. Not all conditional default deny are created equally. Some are more or less restricted default allow. From Security Software Engineering: 1. [B]Default deny[/B] - "Everything, not explicitly permitted, is forbidden" Improves security at a cost in functionality. This is a good approach if you have lots of security threats. 2. [B]Default permit[/B] - "Everything, not explicitly forbidden, is permitted" Allows greater functionality by sacrificing security. [B][I]This is only a good approach in an environment where security threats are non-existent or negligible.[/I][/B] [/QUOTE]

Verification