Unbreakable: Oracle’s Commitment to Security
Beginning in November 2001, Oracle began a marketing campaign: Unbreakable.
The security portions of the campaign reference Oracle’s 14 independent security evaluations (described below in What is Information Assurance?). Such a bold statement raises a number of questions:
• How can anyone claim to be Unbreakable? Security professionals often say that security is a process, not a result. Also, every software product has bugs, and some of those are security bugs.
• Why would anyone claim to be Unbreakable? Security professionals don’t like to be hacker targets, and some hackers wonder if this campaign is a ploy by Oracle to get free “security research.”
• What does Unbreakable really mean? How can vendors and customers know how secure a product is, and whether the security is sustained from release to release? Building secure software is so hard, why even bother, much less try for Unbreakable?
[Read the rest of this entry...]
