Journal: Protection: All or None?
Matt Bishop, a computer security expert, says that the results of poorly implemented protection strategy can be worse than the effects of no protection at all.
In your view, in what ways might a poor protection strategy be worse than nothing?
How would you assess a protection implementation to determine whether it was effective?
