http://www.zdnetasia.com/insight/security/printfriendly.htm?AT=62058697-39001261c
If you had the power to change up to three things in the world today that are related to IT security, what would they be?
Internet design--that's enough.
That's it? What's wrong with the design of the Internet?
There's anonymity. Everyone should and must have an identification, or Internet passport. The Internet was designed not for public use, but for American scientists and the U.S. military. That was just a limited group of people--hundreds, or maybe thousands. Then it was introduced to the public and it was wrong…to introduce it in the same way.
I'd like to change the design of the Internet by introducing regulation--Internet passports, Internet police and international agreement--about following Internet standards. And if some countries don't agree with or don't pay attention to the agreement, just cut them off.
Isn't it enough to have everyone register with ISPs (Internet service providers) and have IP addresses made known?
You're not sure who exactly has the connection. I can have a Wi-Fi connection and connect using a password, or give away the password for someone else to use that connection. Or the connection could be hacked.
Even if the IP address is traced to an Internet café, they will not know who the customer or person is behind the attacks. Think about cars--you have plates on the cars, but you also have driver licenses.
What would keep the vision of an Internet passport, Internet government and an Internet police from becoming reality?
It's expensive, and it's very bureaucratic to have all these agreements.
Governments understand that the problem is a very important one to tackle but they behave in a national way. The minds of law enforcement are still focused on national borders, but the Internet does not have borders. It's a new world in which we have to think differently. That's why I always talk about the need for not just cyberpolice, but Internet police--Internet Interpol.
