Applications, Data, and Cloud Security

This chapter discusses how the combination of software, data, and human interaction secure the overall information systems and expose the business to substantial vulnerabilities (and liabilities!), or both in combination. From the perspective of the information systems designer and builder, all of the action happens at the endpoints. These endpoints are where the real, tangible physical world of things and people is transformed by modeling, abstraction, and reduction into a handful of data values. It's where a similar handful of data values causes huge industrial equipment to move , to change its “end effectors” by swapping out one cutting tool for another, or hoisting this instead of that , and the result is physical, real change in the world we live in. The boundary itself represents the threat surface that logical construct at which subjects attempt to crosses into your virtualized data world. Data‐driven logic helps you separate the legitimate attempts to enter your systems from those that are not. As the on‐scene SSCP, you constantly move across the boundary as you shift your thinking across the data, control, and management planes of your organization's information architectures.