News for hackers. Stuff that matters.

A comment on Zero-days in Cisco Discovery Protocol. Parent comment

Re:Zero-days in Cisco Discovery Protocol by derefr on Thursday February 06, 2020 @04:03PM (#22260262)
> Security is economic. There's a cost/benefit to attack, and to defend.

In some cases, sure. In other cases (e.g. if you're a nation declaring war on the US) you kind of have to assume basically-unlimited cryptanalysis resources and the willingness to prioritize their use to attack your crypto.

Is there a name for the discipline of "cybersecurity doctrine as pertains to protecting against unlimited-strength attacks"? Sort of the crypto equivalent of the Airforce One doctrine, of trying to ensure that an individual survives ICBMs aimed directly at their best-predicted location (with the predictive capacity of a state actor.)

[ Parent | on HN ]
Re:Zero-days in Cisco Discovery Protocol by fulafel on Friday February 07, 2020 @01:03AM (#22263598)
State actors aren't mythical, they're working with budgets same as everyone else, and they don't have "unlimited-strength attacks". They weigh what to burn their zero days on, use social engineering etc low tech attacks when it's more efficient, and so on.
[ Parent | on HN ]