Security Situational Awareness: some philosophical considerations

650) this.width=650; "src=" Https://s2.51cto.com/wyfs02/M01/8C/D8/wKioL1h7VADx3irNAABCFnDquZQ768.jpg "title=" Philosophical thinking. jpg "alt=" wkiol1h7vadx3irnaabcfndquzq768.jpg "/>

Life is human, first and final task is to know yourself-who am I? Where do you come from? Where do you want to go? How to go? This series of questions needs to be answered in your own life. So what is the ultimate task of security posture awareness? Or, what is the mission of our group of practitioners in the security field of situational awareness?

Not that you've researched out new solutions, you've submitted new patents, you've developed a new product, it's just a process, just a byproduct. Since ancient times, all products of the security community have been divided into two main categories: attack and protection. Well, I think, now we should stand at a higher level to see, security posture perception it is actually independent of the two, is a third-party role appearances. It is an objective attitude to the two sides, describing the two sides, do not attach to either party, nor partiality to any party, the proposal is still for both sides to use.

Therefore, the mission of security posture awareness should be to check and balance, to smooth out the mass emotional fluctuations caused by both sides. Checks and balances are to restrict both ends of attack, do not fuel, and to chase down the rise.

In the final analysis, the society is composed of people, all things happen in fact first by the heart, and the group of emotions more likely to lead to herd effect, and therefore is called the mob by Le Pen. We should always be reminded that either party should not be overly optimistic or pessimistic, indeed, the world needs to be changed by the optimists, but when the pessimists are also transformed into optimists, human beings are not far from destruction, this so-called excess.

How to check and balance? Protective end is always passive, has been you attack me, I just know what to prevent. We now need to help security engineers to provide enough information to deploy security policies. It is to be vigilant in a calm time and redouble our efforts in order to respond calmly when the storm comes.

We can always see some people become famous overnight, but must know that it is because of the ten-year work under the Taiwan. A clever hacker will not go out in the spotlight, he will be careful to bide his time, and when you are careless, make a deadly blow. So security personnel must be sensitive to the calm before the storm, since the passive, do not seek victory, demand unbeaten. Security posture awareness should always warn us that there should be no sense of victory, because Outsmart!

In the definition of situational awareness, one of the goals is to "predict future trends". From now on, there is little progress in this direction, and it is only the instrumental stuff, big data, artificial intelligence and so on. So, can the future predict it? At present, from the national policy, capital market, to the industry development, corporate strategy, not the same can be accurately predicted, otherwise there will be no "black swan" concept.

The Black Swan shows that in the realm of science, all theorems will eventually be falsified, not confirmed. In particular, the personal behavior of hackers, this group of highly intelligent, different styles of individuals how can you easily guess?! Of course there will always be some predictive success of the news Bo people eyeball, we should know, play the game of coins, even in 1 million gorillas can also find a continuous guess 20 times, accidental luck, no meaning.

If your predictive success rate reaches 51%, it won't take long for the world to be yours. This is not possible, moreover, the situation-aware prediction results in the security personnel's decision-making in the weight of 20%, it is conceivable that the final accuracy rate of prediction is only infinitely approaching 50%, and toss a coin no difference.

So, technically, which events are predictable? We can still think of it from two aspects. The first is that there is a certain degree of continuity in the development of events, and we are standing at some point before the end of the event, not beforehand. Second, an event has a model effect, a person has been made, there will be more people to do later. In both cases, the approximate result of the event can be predicted. The first focuses on neural networks, and the second focuses on big data.

People say that security posture awareness is a new direction, new areas, but do not know how difficult innovation! Innovation is to change the world, is a small number of people can do, you are sure you are a few? Innovation needs a new way, is to walk the road less people, need anti-humanity and for, to overcome their own human nature, easy? If anyone tells you that he has made an easy innovation, that person must not be a liar or a fool. Fortunately, Confucius had given the answer more than 2000 years ago, and he knew that we would all be able to move forward.

Finally, from the historical development point of view, all problems are fundamentally philosophical issues, I hope this article can provide assistance to the general practitioners.

This article is from the "Chuan XI" blog, please be sure to keep this source http://chuanflow.blog.51cto.com/12426207/1892113

Security Situational Awareness: some philosophical considerations