Don't be an application bigot

摘要

Many Security decisions and acceptable use policies are based on a false categorization of applications. "Business applications"rnare good, safe and have business value. "Personal applications" are bad, unsafe and have no business value. Companies decide how to treat an application based on who installed it, who authorized it and how it is perceived, rather than the intrinsic security or value of each of its features. That false categorization is very common because it is implicit and unacknowledged - we make the cognitive error without noticing. Think of it a bit like the equivalent of "racial profiling" of applications and consider how it results in poor decisions: good applications are banned because of prejudice and security suffers because unsafe applications get a free pass because of their "pedigree".