Faulty assumptions in the design of security strategies Misplaced confidence in the technology that has resulted from the flawed strategies. The assumption that systems will be used as intended rather than in any manner possible. The design that allows and promotes easy customer access also enables distributed denial of service attacks. Identity fraud cases in which one individual uses many identities and cases of immigration fraud where many individuals use a single identity. The assumption that information is true.
Lies digitize as easily as the truth.
The assumption that rules will be followed. The assumption that the Internet and electronic commerce system is composed only of software and hardware. Security system design has to incorporate all four elements to be effective. The assumption that, the primary risk is in the loss or compromise of the message in transit. The low-hanging fruit is accumulated information.