| 2.1 Service Catalogue
04. Public Security Service | |
|---|
| 21.04 Public Security Service: | | 1. The public part of the website is protected with an internal Public Security Service that helps both security and performance. | | 2. Every transaction is treated as being a potential threat until it can be proved otherwise. | | 3. Many factors are matched against known good behaviour and unknown bad behaviour - bad behaviour is show the home page or a "hello world" message. | | 4. Error and warning messages are not used because they would provide a criminal with an unreasonable benefit. |
| PSS: | | 1. Known IP addresses with have known networks, known operating systems and known browsers with known screen resolutions. | | 2. PSS is an artificial intelligent assistant that matches behaviour against a map of acceptable behaviour and stops unacceptable behaviour. | | 3. A transaction from an IP address that has a geo-location that is not as expected, it likely to be shown a "hello world" message rather than the home page. | | 4. A transaction from an operating system that is known not to be used by any approved person is likely to the shown the home page and nothing but the home page, no matter what link it pressed. |
| Secrecy: | | 1. The full capability of the PSS artificial intelligent assistant is a trade secret and continually evolving. As criminals learn new attack vectors, then PSS learns how best to put them down. | | 2. Security is a full time battle that takes place each and every hour of every day. PSS has been refined by more than a decade of continual attacks for every nation that have all been put down. PSS is so good that a false-positive reaction is not something that an approved person will have noticed. |
|
|