Understanding and overcoming cyber security anti-patterns

摘要: This article presents an empirical and practice-based analysis of the question, why despite substantial investments, there are still major security weaknesses in today's information systems. Acknowledging that cyber is not a purely technical discipline, takes holistic approach identifies four anti-patterns frequent practice detrimental to goal achieving strong security. The first anti-pattern decisions about frequently based on intuition rather than data rigor; this introduces cognitive biases undermines decision quality. Second, many organizations fail implement foundational controls consequently, easy targets for opportunistic novice attackers. Third, overreliance relatively static threat knowledge products such as virus scanners, while inability learn adapt dynamically opens door advanced threats. Fourth, governance create systemic control gaps vulnerabilities. describes each specific steps can take overcome them.