#+SETUPFILE: ../../../template/level-2.org
#+TITLE: IEEE 1012 Featuring Security
#+DATE: <2021-02-02 Tue 22:52>
#+AUTHOR: vaeringjar
#+EMAIL: vaeringjar@land
#+DESCRIPTION: Language definitions thanks to engineering.
#+KEYWORDS: language security IEEE


* Unrelated Updates

My ssg has a few known bugs, but I also discoverd the RSS feed
generator has a bug. I think I need to make a breaking change to not
use a default title. I also want to finally finish a proper
installation, so it works from anywhere, not just the parent directory
(which is lame, I know, but I wrote this specifically, only, and
originally for my blog). My ssg also only works one at a time because
emacs defaults to using the same temp location for the current user. I
think I can fix that by specifying the temp location. I originally
wrote it when I migrated to org mode, which I still think was a good
idea). But at the time I wanted to write a purely el
implementation. Well, the rss feed generator already breaks those
hopes!


* IEEE 1012

A few years ago I was convinced by one of my graduate teachers that
safety relates to damage or harm while security relates more to
preventing unauthorized access.

#+BEGIN_QUOTE
security: (A) The protection of computer hardware or software from
accidental or malicious access, use, modification, destruction, or
disclosure. Security also pertains to personnel, data, communications,
and the physical protection of computer installations.  (B)The
protection of information and data so that unauthorized persons or
systems cannot read or modify them and authorized persons or systems
are not denied access to them.

NOTE—See ISO/IEC/IEEE 24765:2010 [B20].
#+END_QUOTE


Over the years I had forgotten where this idea came from. I have
referred to it in previous posts as well as during conversations. I
have encountered a bit of resistence to this idea, though. Most folks
think "safety" means security. Just look at the python package called
safety. It's not the only example.


* How I Found It Again

I was in a meeting today where folks could not agree on a well-crafted
series of milestones. I thought to myself, "Great! I wrote a paper on
this during my grad program!" I dug up the standard and skimmed
through the definitions and there was the entry for security staring
at me in the face.


* References

- https://standards.ieee.org/project/1012.html
- https://pypi.org/project/safety/
