Wednesday, July 26, 2006

Lack of Confidentiality & Integrity almost saves a legend

In our line of work, most of the objectives revolve around the 'Security Triad' of A-I-C, Availability, Integrity and Confidentiality.
The strive for confidentiality is often the driver for reactions such as the disabling of USB ports to prevent 'data disclosure' and the blocking of personal webmail.

Steve and Jesper have documented interesting viewpoints on the futility of these actions if not underpinned by a solid access control mechanism (need to know or least privilege enforcement).

Interestingly one of this country's greatest aviation achievements could have been saved if Confidentiality had been breached but Integrity was left intact.
Concorde has always been embroiled in complex and volatile political and financial entanglements.
It is a well document fact that had America continued with its supersonic passenger jet, then many of the obstacles around landing at New York would not have occurred.Had the Russian TU-144 (Concordski) continued successfully, it is highly likely that America would not have pulled the plug on its supersonic project.

Why was the TU-144 unsuccessful?

Apparently, someone at the British manufacturing plant that built the Concorde (or at the French plant!), seemed to have communist sympathy and leaked the Highly Confidential blueprints for the Concorde's design.
How this happened is not clear, (it wouldn't have been a USB stick back in the 70's though) but this is a good example of data leakage which strong authentication and stringent access control could have gone some way to preventing.

Before the plans ended up in Russia however, British Intelligence (If that’s not an oxymoron!), intercepted the leaked documents, and decided to alter them before allowing them to pass onto the Russian aviation company.

This is where the lack of Integrity played a part.

The documents were leaked, but they were not authentic.Interestingly, these changes in the leaked documents have been held responsible for the demise of the TU144.

Who knows, if the TU had have been successful, America would probably have kept in the supersonic race and the Concorde would have become more mainstream, making it a more viable proposition.

All of this down to a lack of Confidentiality and Integrity (but far too much Availability!).

In memory of one of the most gorgeous feats of engineering...

0 Comments:

Post a Comment

<< Home