Research - Denver, Colorado, United States
Our relationship with computing technology has never been more pervasive or intimate, and that intimacy is only increasing. Computers used to take up whole buildings, then rooms, then merely desktops. Today laptops, handhelds (smartphone), wearables (smartwatch), and implantables (medical devices) are commonplace. The safety and security of that technology has become a matter of grave importance.Yet not a week goes by without someone talking about a ‘new' idea…that was really something someone else had come up with five years prior, that was an extension of something someone else had done 10 years before that. As security practitioners we like to think we're scientific, yet when it comes to some basic practices like being able to discover and assess prior art we're far behind the curve.This is an issue that goes beyond the purely technical. 2021 is the 51st anniversary of the Ware Report, which effectively codified sound computer security practice. Yet almost no one who isn't literally a ‘gray beard' knows what you're talking about when you bring it up. We have decades of history to draw upon and help inform our decisions, but to borrow a line from J.R.R. Tolkien:"And some things that should not have been forgotten were lost. History became legend. Legend became myth…"Without a concerted effort to capture and make accessible security research and history, we condemn ourselves to perpetual wheel-reinvention. Conferences and their proceedings come and go. People take down web sites and GitHub repos for various reasons. The Wayback Machine doesn't capture everything, and we shouldn't have to rely on a general purpose archiving effort to preserve such an important set of information. If we have a talent shortage in this field, shouldn't we be doing everything we can to ensure that rare talent spends it time working on the novel, or making substantial contributions?
Gmail
Google Apps