It divided these companies into generations like so:
- First Generation (IBM) "The money is in the hardware, not the software"
- Second Generation (MSFT) "Actually, the money is in the software"
- Third Generation (GOOG) "The money is not in the software, but it is differentiating"
- Fourth Generation (Facebook/Twitter) "Software is not even differentiating, the value is the data"
Perhaps:
- First Generation: Steal Service (70's and 80's - phreaking, war-dialing, etc)
- Second Generation: Steal Software (80's and 90's - cracking, serials, etc)
- Third Generation: Steal Network (90's up and 00's - DDoS, illicit file servers, shells, etc)
- Fourth Generation: Steal Data (2000-present - SQLi, carding, etc - monetization)
- Pre-history - Phone systems
- PC's - Attacking individual PCs, PC software, viruses, etc
- Networks - Attacking network services
- Network Applications - Attacking networked applications
But I'm starting to think that we should acknowledge that it has always really been about the application - only the goals have changed. That ultimately, the problem has always been bad software (requirements, design, implementation, testing, configuration, etc) whether it was phone switch hacking or virus/cracking activity or DDoS/root shells or "modern" web hacking.
Aside from identifying bad software - we are still faced with the issue of evolving technologies without perfecting (or at least securing) previous technologies.
ReplyDeleteJust a view. :)
Thank you for your comment. I apologize for letting it languish in moderation - I did not have my settings properly adjusted and I was not notified. I have corrected this.
ReplyDelete