CERIAS - Center for Education and Research in Information Assurance and Security

Skip Navigation
Purdue University - Discovery Park
Center for Education and Research in Information Assurance and Security

Information Security, a Folk Art in Need of an Upgrade

Donn Parker

Donn Parker - SRI Consulting

Nov 12, 1999


Information security is an inarticulate, incoherent, incomplete, incorrect folk art attempting to preserve confidentiality, integrity, and availability (CIA) of information from destruction, disclosure, use, and modification (DDUM). This CIA/DDUM framework is the equivalent of alchemy in the middle ages when the elements consisted of fire, water, earth, and air. We must have security based on a coherent and complete framework model for stopping irrational cybercriminals. We must replace security risk reduction, an unmeasurable negative goal, with achieving standards of due care consistent with the new view of security as an enabling function.

About the Speaker

Donn B. Parker, an emeritus senior consultant at SRI Consulting, has spent 30 of his 47 years in the computer field doing research on computer crime, and consulting, writing, and lecturing on information security. He is the founder at SRI of I-4 serving more than 75 of the largest multinational corporations in their security for 14 years. He has written six books. His newest book, "Fighting Computer Crime: A New Framework for Protecting Information," (Wiley, 1998) is an international best seller. He received the ISSA Individual Achievement Award, the United States National Computer Systems Security Award, the Aerospace Computer Security Distinguished Lecturer Award, and the MIS Infosecurity Magazine Lifetime Achievement Award. In September 1999, The Information Security Magazine profiled him as a pioneer in information security.

Unless otherwise noted, the security seminar is held on Wednesdays at 4:30P.M. STEW G52 (Suite 050B), West Lafayette Campus. More information...


The views, opinions and assumptions expressed in these videos are those of the presenter and do not necessarily reflect the official policy or position of CERIAS or Purdue University. All content included in these videos, are the property of Purdue University, the presenter and/or the presenter’s organization, and protected by U.S. and international copyright laws. The collection, arrangement and assembly of all content in these videos and on the hosting website exclusive property of Purdue University. You may not copy, reproduce, distribute, publish, display, perform, modify, create derivative works, transmit, or in any other way exploit any part of copyrighted material without permission from CERIAS, Purdue University.