Opinion

Diversity Training

When systems are homogenized, security suffers.

By David H. Holtzman

But introducing even a token number of Unix workstations or servers forces the Windows administrative staff to learn the basics of other systems and reduces the corporate dependence on a single line of technologies.

What does it all mean? The conveniences that homogeneity and features such as patching provide might not be so great after all. It would be telling, for instance, to measure the benefits of homogeneity against one major virus attack like Slammer. Without doing calculations, it's not hard to imagine that one bout with Slammer costs more than the convenience that standard features give you over the course of a year.

Which all leads to some counterintuitive advice for the security conscious: CSOs should make an effort to slow down the rate of standardization in the enterprise. Use a combination of Linux and Windows, and don't be too quick to apply a patch unless something is already broken. Turn off automatic updates. Buy equipment from more than one manufacturer; a good mix is 70:30. There's also a cost advantage because competition drives better deals.

Hedge your betsthe best containment strategy to avoid catastrophic failure is diversification.

• Email
• Print
• Comments
• Digg This
• SlashDot

• Mobile Security Largely Based on Lack of Windows Monoculture
• Antivirus: Great Business, Lost Cause
• Kevin Mitnick and Anti-Social Engineering