News for hackers. Stuff that matters.

A comment on Why firewalls won’t matter in a few years. Parent comment

Re:Why firewalls won’t matter in a few years by Swannie on Sunday May 31, 2015 @10:15PM (#9636474)
I was shocked to read a EAL4 summary for a product that I know to be extremely hard to secure.

But of course, if you follow all the steps, that only the vendor knows, it can be EAL4. Just don't miss one of the 100s of settings... :/

[ Parent | on HN ]
Re:Why firewalls won’t matter in a few years by nickpsecurity on Sunday May 31, 2015 @11:08PM (#9636627)
Haha I feel you on that. It's very important for people to understand the basic way C.C. works: a security target or protection profile with the security features needed (can't leave anything out!); an EAL that shows they worked hard (or didn't) to implement them correctly. I'd explain what EAL4 means but Shapiro did a much better job below [1]. That most of the market has insufficient requirements with EAL4 or lower assurance shows what situation we're in. Hope you at least enjoyed the article as I haven't been able to do much about the market so far. ;)

[1] https://web.archive.org/web/20040214043848/http://eros.cs.jh...

[ Parent | on HN ]