Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Open Source Is Becoming a Military Necessity
The Street ^ | 17 August 2012 | Dana Blankenhorn

Posted on 08/18/2012 11:59:23 AM PDT by ShadowAce

One of the biggest lies told about open source is that it's insecure.

In letting just anyone use your code, that has to include the bad guys. They're bound to find a way to compromise it, the thinking goes.

But that's not the way it works in real life. Having every potential victim working on your neighborhood code watch turns out to deliver more security, not less.

Having everyone who might be the victim of an online break-in organized, finding bugs, writing and testing fixes, constantly improving security tools, works.

Don't believe me? Well, maybe you'll believe the National Security Agency or the Department of Homeland Security. The open source process works for them, too.

For a decade, one of the most popular intrusion prevention and detection systems has been Snort, created by Martin Roesch. But the company he built around that software, Sourcefire, only gives away the basic package. If you need extensions, if you want a more complete system, you have to pay. That code is controlled by Sourcefire.

There is nothing unusual in that. Many open-source businesses create free community and paid "enterprise" editions of their software. This is what Red Hat(RHT) is all about -- you can download Fedora Linux free or buy Red Hat Enterprise Linux. In both cases you get to see the code, but with the paid version you get the support needed to run it professionally.

But this model didn't work with Snort. The Department of Homeland Security, the military, and the NSA could not be "held hostage" to Sourcefire for improvements to the code, or for the specialized suite needed to protect the nation.

So the Department of Homeland Security got together with major contractors and formed their own open source project, the Open Information Security Foundation. OISF has its own intrusion system, called Suricata, whose syntax is based on Snort, so if you are accustomed to one you can use the other.

But Suricata will be a complete system, not just a "sniffer," as intrusion detection products are colloquially known. The whole Suricata suite will be open source. This process is now expanding, as I noted here at TheStreet.com on Monday.

In May, the National Security Agency co-hosted an Open Source Security Industry Day at a Johns Hopkins facility in Fort Meade, Md. As ZDNet's Steven J. Vaughan-Nichols reported, agency people described their needs for open source and urged suppliers to include open source in their offerings.

John Weathersby of the OSS-Institute, which is now affiliated with Georgia Tech in Atlanta, told me most of the day was devoted to small "breakout" sessions, where contractors answered hard, detailed questions put to them by key government customers. The affair wasn't just a series of sales pitches, he said. It was the first step in a negotiation.

Among the open source projects the NSA supports is Security Enhanced Linux (SE-Linux), for which it has developed an access control module called Flask, hosted at the University of Utah. Open source and security, in other words, do go together.

Open source can only provide tools. Procedures are also needed to assure that people maintain security. So the Cloud Security Alliance offers an integrated stack of such procedures, called the GRC Stack. GRC stands for Governance, Risk management and Compliance. This is maintained in an open process with the support of both contractors and software vendors.

Point is, open source and security do mix. They mix well. With more businesses moving toward cloud technology, much of it based on open source software, they are going to be doing a lot more mixing.


TOPICS: Computers/Internet
KEYWORDS: linux; security
Navigation: use the links below to view more comments.
first previous 1-20 ... 41-6061-8081-100 ... 141-150 next last
To: Aquamarine

Thank you very much, Aquamarine!! God bless.


61 posted on 08/18/2012 6:58:58 PM PDT by Jim Robinson (Resistance to tyrants is obedience to God!!)
[ Post Reply | Private Reply | To 56 | View Replies]

To: outofsalt; Marcella

Woo hoo!! Thank you both very much!! GO, FReepers!!


62 posted on 08/18/2012 7:00:54 PM PDT by Jim Robinson (Resistance to tyrants is obedience to God!!)
[ Post Reply | Private Reply | To 59 | View Replies]

To: onyx; Jim Robinson
Jim,onyx is my witness. It is 8:58 EDT. Do the math and put us in the yellow on my account.

Pray for the Republic folks.

63 posted on 08/18/2012 7:02:31 PM PDT by houeto (https://secure.freerepublic.com/donate/)
[ Post Reply | Private Reply | To 50 | View Replies]

To: Jim Robinson

Twice this month was that last month.....let’s look to our future. In for $50, Jim.


64 posted on 08/18/2012 7:03:48 PM PDT by BIGLOOK (82 days)
[ Post Reply | Private Reply | To 38 | View Replies]

To: centurion316; Jim Robinson
I'm a monthly contributor who is going to vote the Romney/Ryan ticket (and conservative all the way downticket). For those who cannot bring themselves to vote for Romney/Ryan, I have to respect their opinion and their standing on principle, even if it might result in an Obama re-election should the election be very close (Remember that Bush won Florida by only 537 votes and losing Florida would have made Al Gore president).

I also respect the fact that Jim Robinson, even though he has stated he will not vote for Romney, does not condemn other Freepers for doing so and has basically called for a truce between the ABR folks and those who believe that Romney, despite his shortcomings, is better than Obama and thus will vote for him.

What I can't respect are those few posters who spam every single thread with their anti-Romney vitriol and attack other Freepers as turncoats and RINOs for deciding to vote for Romney - despite the fact that Romney was the first choice of virtually zero Freepers. I believe they are counter-productive. They aren't going to win anybody over to their point of view with their line of attack and they are driving a wedge in Free Republic that need not be there. Who knows how many good Freepers they have driven away.

Well they won't drive me away but neither will I engage them and add to the infighting that is already going on.

I've been here 15 years and been through some tough times here - we'll get through this time as well.

Getting back to the exchange between Jim Robinson and Don-o regarding Freepathon ads, I side with Jim. The Freepathon ads do not annoy me and compared to most websites, the advertising here (if you can call it that) is very unobtrusive. Much credit needs to go to the Free Republic Freepathon crew who keeps this forum in operation. Anti-Freepers have been standing on the sidelines for years, wishing for us to go under, chortling at every Freepathon that gets to its goal slowly. But we always find a way to hit our target and stay alive for another few months. The Freepathon crew cannot be thanked enough.

I've been giving $30 a month to Free Republic for a number of years and it's pretty painless. I wouldn't say I'm wealthy or anything - probably I'm on par with the average Freeper with respect to household income. If everybody who came to this site on a regular basis donated at least $10 a month, we'd probably never have another Freepathon again and who knows, maybe the monthly Freepers would start getting swag like coffee mugs and T-shirts again, like in the old days - if more regular Freepers kicked in.

Sorry for the long-winded reply but one more suggestion that might help. Maybe we could do something to set the monthly donors apart - like having their screen name show up in bold red on the board or something like that. This would identify the monthly donors in the forum and might help entice others to want to get that special touch to their screen names as well.

65 posted on 08/18/2012 7:04:18 PM PDT by SamAdams76
[ Post Reply | Private Reply | To 51 | View Replies]

To: SamAdams76

Thank you very much, SamAdams76!! Well said and greatly appreciated.


66 posted on 08/18/2012 7:08:28 PM PDT by Jim Robinson (Resistance to tyrants is obedience to God!!)
[ Post Reply | Private Reply | To 65 | View Replies]

To: outofsalt; Marcella
...if you are alive and take any action at all, information about you will be on the web

This is so true. And you'll be known in places which may surprise you. For example, I have a website. I just recently tried to access it in the Guangzhou airport(CAN) in commie China. Couldn't. They block it. HA! That is a compliment.

67 posted on 08/18/2012 7:08:53 PM PDT by Jemian
[ Post Reply | Private Reply | To 59 | View Replies]

To: BIGLOOK

Aloha and thank you very much, BIGLOOK!!


68 posted on 08/18/2012 7:10:58 PM PDT by Jim Robinson (Resistance to tyrants is obedience to God!!)
[ Post Reply | Private Reply | To 64 | View Replies]

To: Jim Robinson

I don’t have a problem with the way Freepathons are conducted, but I also think that it might help to have a permanent banner (?) or something asking to help keep the lights on (not to be confused with a Freepathon campaign). I wouldn’t mind seeing this at the top of FR home and the forums. It seems that once a Freepathon is over, there is little or no suggestion of donations.


69 posted on 08/18/2012 7:20:11 PM PDT by umgud (No Rats, No Rino's)
[ Post Reply | Private Reply | To 38 | View Replies]

To: Jim Robinson

Jim I will be writing out a check for 40 dollars tomorrow. Thanks for everything you do. Sometimes I ‘need a gentle tap on the shoulder.


70 posted on 08/18/2012 7:20:58 PM PDT by windcliff
[ Post Reply | Private Reply | To 38 | View Replies]

To: houeto; Jim Robinson

I’m checking. You and Jim must be communicating.

God bless and keep you, dearest houeto!!!!


71 posted on 08/18/2012 7:23:52 PM PDT by onyx (FREE REPUBLIC IS HERE TO STAY! DONATE MONTHLY! IF YOU WANT ON SARAH PALIN''S PING LIST, LET ME KNOW)
[ Post Reply | Private Reply | To 63 | View Replies]

To: BIGLOOK
THANK YOU VERY, VERY MUCH, DEAREST BIGLOOK!!

God bless and keep you and everyone you love.

YOU ROCK!!!!

72 posted on 08/18/2012 7:25:30 PM PDT by onyx (FREE REPUBLIC IS HERE TO STAY! DONATE MONTHLY! IF YOU WANT ON SARAH PALIN''S PING LIST, LET ME KNOW)
[ Post Reply | Private Reply | To 64 | View Replies]

To: houeto; onyx

Thank you very much, houeto!!

Just posted this to the FReepathon thread and we’re about $299 from the Yellow and more coming in now:

Woo hoo!!

And this just in:

$35.00 from California
$50.00 from Hawaii
$25.00 from Georgia
$50.00 from Texas
$25.00 from Illinois

Thank you all very much!!

FReepers are absolutely the greatest!!

Less than $300 to the YELLOW!! Then it’s down the homestretch to the GREEN!! We can do this.


73 posted on 08/18/2012 7:25:32 PM PDT by Jim Robinson (Resistance to tyrants is obedience to God!!)
[ Post Reply | Private Reply | To 63 | View Replies]

To: windcliff

Thank you very much, windcliff!! God bless.


74 posted on 08/18/2012 7:26:50 PM PDT by Jim Robinson (Resistance to tyrants is obedience to God!!)
[ Post Reply | Private Reply | To 70 | View Replies]

To: Jemian

“This is so true. And you’ll be known in places which may surprise you. For example, I have a website. I just recently tried to access it in the Guangzhou airport(CAN) in commie China. Couldn’t. They block it. HA! That is a compliment.”

You are banned in China - you must have a great website. I’ve been to mainland China for one day and took a shower as soon as I got back to my hotel in Hong Kong. China is a dirty place. Plus, the mainland Chinese kept pointing to me because my hair was blonde. Someone had to tell me that’s why they were pointing.


75 posted on 08/18/2012 7:27:08 PM PDT by Marcella (PREPARE)
[ Post Reply | Private Reply | To 67 | View Replies]

To: Jim Robinson

It’s travelling to you Jim Rob. I use snail mail. Bless you for all you’re doint.


76 posted on 08/18/2012 7:30:22 PM PDT by tillacum
[ Post Reply | Private Reply | To 38 | View Replies]

To: Jim Robinson
It took me a while on FR before I "got it" regarding the Freepathons. I was reluctant to give money to some website, not knowing where the money was going, what it was for or if my identity would be safe. One of the first things that helped my comfort level was PayPal. I felt that at least I was only at risk with my donation.

As new people come on the board they will go through this learning curve. FR provides a good and valuable service. I believe you will be able to keep the good fight going. Good luck to you and us, and God Bless America.

77 posted on 08/18/2012 7:30:45 PM PDT by jdsteel (Give me freedom, not more government.)
[ Post Reply | Private Reply | To 38 | View Replies]

To: SamAdams76

It’s been a very frustrating 3+ years for conservatives. Even with big wins in the 2010 election, our agenda is frustrated by Obama and by Republican career politicians who have grown fat and wealthy feeding at the government trough.

But, we haven’t seen anything yet. If Obama wins this fall, he will use the powers ceded to him by the Congress to rule by fiat in a way never before seen in this country. He will defy the Congress to do anything to stop him, and they oblige by ranting and raving and caving like a cheap suitcase. Voters, not politicians, can stop this, but we must start by defeating Obama. Did I mention that we have to defeat Obama? No other outcome will suffice.


78 posted on 08/18/2012 7:33:28 PM PDT by centurion316
[ Post Reply | Private Reply | To 65 | View Replies]

To: Jim Robinson

$20 from Texas Jim.

79 posted on 08/18/2012 7:37:37 PM PDT by Liberty Valance (Keep a simple manner for a happy life :o)
[ Post Reply | Private Reply | To 38 | View Replies]

To: Marcella

I agree with you about the dirt. The airport was dirty. The airline, China Southern Air, was dirty AND DANGEROUS. Not enough hydration and too crowded to move. That is a sure recipe for DVT and other problems.

We won’t be doing that route again.


80 posted on 08/18/2012 7:38:25 PM PDT by Jemian
[ Post Reply | Private Reply | To 75 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-20 ... 41-6061-8081-100 ... 141-150 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson