“心脏出血”漏洞引发的思考

＂心脏出血＂漏洞引起了全球对信息安全的广泛讨论。本文从安全经济学、安全机制、开源安全性和国家安全出发,多角度地对此次事件进行思考和讨论,揭示出信息安全作是一项系统工程,我们不仅要关注技术层面,更需要关注安全事件背后反映出来的深层次问题。

Thinking of Heartbleed Bug

Heartbleed bug provides a springboard for a lot of discussion of Information Security. This article discusses and thinks about this event from Economics of Information Security, Security Mechanism, Opensource Secutiry and National Security. It shows that Information Security is a system engineering, we must focus on not only the technology, but also the deep problems of security event.