SecurityArena

Functionality vs Security

Computer applications and systems are usually developed with functionality as a primary consideration, not the security. Therefore in real life environments, we need to use additional perimeter devices rather than relying only on software intrinsic security measures.

Because vendors have user-friendliness and user functionality in mind, the product will usually be installed with defaults that provide no or very low security protection. It would be very hard for vendors to know the security levels required in all the environments that the product will be installed in, so they usually do not attempt it. It is up to the person installing the product to learn how to properly configure the settings to achieve the necessary level of protection.