The Emperor's old armor

Abstract

The traditional model of computer security was formulated in the 1970's, when computers were espensive, solitary, heavy, and rare. It rests on three fundamental foundations: management of security policy describing the set of actions each user is entit.led to perform, integrity of the physical system, its software, and especially its security-enforcing mechanisms, and secrecy of cryptographic keys and sensitive data.The modern computing environment, with its rapidly accelerating complexity, connectivity, and miniaturization, is undermining all three of these foundations. Nevertheless, the newest "secure" computer systems continue to be built on them. This paper argues that the traditional model of computer security is no longer viable, and that new definitions of the security problem are needed before the industry can begin to work toward effective security in the new environment.

Game mechanics and technological mediation: an ethical perspective on the effects of MMORPG’s

“…A major difference between game addiction and some other addictions is the fact that the causes of addiction are due to design activities rather than natural properties. Whereas certain natural phenomena have inherent addictive properties, behavioral game design involves imposed addictive properties (Blakley 1996).…”

Computing under occupation

“…Therefore, space (and to some extent, computation time) can be used as a bottleneck; this has for example been proposed for e-cash [4]. In our case, we can make the authentication to some service requires a one gigabyte key.…”

Fortresses built upon sand

“…In that case, I agree with him that access control policies are very difficult to administer, and don't scale in any dimension; they are limited both in the number of subjects, functions, objects, operations, and classes, and in breadth of control. Further, as both Wulf et al [ WUL96] and Greenwald [GRE96] point out, today's distributed environments require multiple protection philosophies and policies.2…”