{"id":675,"date":"2006-01-19T00:00:00","date_gmt":"2006-01-18T23:00:00","guid":{"rendered":"https:\/\/wwwneu.strehle.de\/tim\/weblog\/archives\/2006\/01\/19\/613\/"},"modified":"2006-01-19T00:00:00","modified_gmt":"2006-01-18T23:00:00","slug":"613","status":"publish","type":"post","link":"https:\/\/www.strehle.de\/tim\/weblog\/archives\/2006\/01\/19\/613\/","title":{"rendered":"Access control, monoculture, and accountability"},"content":{"rendered":"<p>Jon Udell at InfoWorld &#8211; <a href=\"http:\/\/www.infoworld.com\/article\/04\/09\/17\/38OPstrategic_1.html\" title=\"Access control, monoculture, and accountability | InfoWorld | Column | 2004-09-17 | By Jon Udell\">Access control, monoculture, and accountability<\/a>:<\/p>\n<p>&#8222;Geer argues that access control lists &#8212; although they\u2019ll remain a vital ingredient of information security &#8212; can\u2019t take us where we now must go. The reason is that linear growth in the number of people you authenticate, or the number of resources you control their access to, or both, results in geometric growth of the matrix of checkboxes you must fill out. Every checkbox requires an explicit choice, and it gets impossibly hard to keep up.<\/p>\n<p>The way forward, Geer suggests, is not to abandon ACLs but rather to augment them with aggressive monitoring that holds people accountable for behaviors that can\u2019t economically be permitted or denied. ACLs don\u2019t scale because checkbox maintenance requires a scarce resource: the human decision-maker. Accountability does scale because event logging and data analysis ride the favorable current of Moore\u2019s law.&#8220;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Jon Udell at InfoWorld &#8211; Access control, monoculture, and accountability: &#8222;Geer argues that access control lists &#8212; although they\u2019ll remain a vital ingredient of information security &#8212; can\u2019t take us where we now must go. The reason is that linear growth in the number of people you authenticate, or the number of resources you control [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[1],"tags":[],"class_list":["post-675","post","type-post","status-publish","format-standard","hentry","category-weblog"],"share_on_mastodon":{"url":"","error":""},"_links":{"self":[{"href":"https:\/\/www.strehle.de\/tim\/wp-json\/wp\/v2\/posts\/675","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.strehle.de\/tim\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.strehle.de\/tim\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.strehle.de\/tim\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.strehle.de\/tim\/wp-json\/wp\/v2\/comments?post=675"}],"version-history":[{"count":0,"href":"https:\/\/www.strehle.de\/tim\/wp-json\/wp\/v2\/posts\/675\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.strehle.de\/tim\/wp-json\/wp\/v2\/media?parent=675"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.strehle.de\/tim\/wp-json\/wp\/v2\/categories?post=675"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.strehle.de\/tim\/wp-json\/wp\/v2\/tags?post=675"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}