Fallacies of Distributed Computing: 4. The network is secure
Tags: distributedcomputing
Published: 2020-05-19 00:00:00

---
title: "Fallacies of Distributed Computing: 4. The network is secure"
date: "2020-05-19T00:00:00.000Z"
tags: ["distributedcomputing"]
---

[The fallacies of distributed computing](https://web.archive.org/web/20171107014323/http://blog.fogcreek.com/eight-fallacies-of-distributed-computing-tech-talk/) are a set of assertions describing false assumptions made about distributed systems. 

[L. Peter Deutsch](https://en.wikipedia.org/wiki/L._Peter_Deutsch) drafted the first 7 fallacies in 1994, with the 8<sup>th</sup> added by [James Gosling](https://en.wikipedia.org/wiki/James_Gosling) in 1997.

The 8 fallacies are:

1. [The network is reliable](https://dereklawless.ie/fallacies-of-distributed-computing-1-the-network-is-reliable)
1. [Latency is zero](https://dereklawless.ie/fallacies-of-distributed-computing-2-latency-is-zero)
1. [Bandwidth is infinite](https://dereklawless.ie/fallacies-of-distributed-computing-3-bandwidth-is-infinite)
1. [The network is secure](https://dereklawless.ie/fallacies-of-distributed-computing-4-the-network-is-secure)
1. [Topology doesn't change](https://dereklawless.ie/fallacies-of-distributed-computing-5-topology-doesnt-change)
1. [There is one administrator](https://dereklawless.ie/fallacies-of-distributed-computing-6-there-is-one-administrator)
1. [Transport cost is zero](https://dereklawless.ie/fallacies-of-distributed-computing-7-transport-cost-is-zero)
1. [The network is homogeneous](https://dereklawless.ie/fallacies-of-distributed-computing-8-the-network-is-homogeneous)

## 4. The network is secure

### The problem

Your ecommerce website is accessible over HTTPS only, you rest easy knowing that all communication between your customers and your website is securely encrypted. 

However, some of the scripts embedded in your website for gathering customer analytics are using HTTP. Also, that third party service you call privately from your own API to validate customer addresses works over HTTP because HTTPS was judged to be "too expensive" in a dim and distant past.

--

In April 2014 the [Heartbleed](https://heartbleed.com/) vulnerability was made public. The SSL standard includes a heartbeat option, which allows one party communicating over an SSL connection to send a short message to the other party to check if they are available.

Heartbleed was a buffer over-read exploit on OpenSSL servers - by sending malformed hearbeat requests that weren't validated by OpenSSL using bounds-checking, attackers were able to trick OpenSSL into returning random bits of memory from the server -  even for failed connections. Because these bits of memory were often near the code authenticating users, it was possible to obtain authenticated user data just by pinging the server.

--

A cursory browse of the [have i been pwned?](https://haveibeenpwned.com/) website reveals millions of user details that have been exposed by attackers exploiting vulnerabilities like Heartbleed, poorly configured application stacks, unsecured databases, and so on.

__The network is not secure.__

### Solutions

Security should be built into the DNA of a system, not bolted onto it. As a quality attribute, it should be considered at the network, infrastructure, and application layers. 

Data produced and consumed by the system should be identified and classified according to its nature (e.g. [PII](https://en.wikipedia.org/wiki/Personal_data)) and associated risk of exposure. 

The Open Web Application Security Project (OWASP) maintain a [top ten list](https://owasp.org/www-project-top-ten/) of web application security risks. These can be considered as part of a broader [threat modeling practice](https://owasp.org/www-community/Application_Threat_Modeling) and (in some cases) evaluated on an automated basis.

Ultimately, the only truly secure system is one which cannot be observed or interacted with in any way by human or other means. As such, ensuring the security of a system based on identified risks and their probability while still meeting business goals in a timely fashion is frequently a non-trivial exercise.