Dumb thoughts about Computer Security

[Fade]

Black hats are smart folks with a lot of monetary incentive. They look for ways to use our conveniences against us. I am not much of a tech, outside of my own application realm...so I can't speak to specifics....

But from what read, This particular exploit involved using some MS admin tools, which were designed to make administration easier and better... i.e. push out virus definition updates to a large number of systems. Problem is that it is being misused. This convenient system is providing a 'single point of failure' with regards to security.

So all that, to throw out a thought for the real experts who know about admining (that is not me). Do you think this strategy would be useful for the next generation of security systems? (this is just fodder for discussion...not expecting to change the world here)... so here is the idea...via a metaphore.

In the U.S. political system, we found a way (so far) to manage the problem of a single 'political' point of failure... i.e. authorities having too much power and abusing it. Think of this as a set of admin tools that can have ultimate power on a network.

The American solution was a division of power, with branches of government that watch the other....checks and balances.

Could such a concept work whet it comes to designing administrative and security systems for PCs and networks? Design the systems, so that there is a decentralization of power/access...into a few (still manageable) components which authenticate the operations of the others somehow.

This already happens a bit when you register for a site, and a confirmation email gets sent to you...requiring you to do one more step of action... it is a verification double check. What if modern OS and nets were designed with this built in...with 3 or 4 'branches' that administer the others...and have limits on what access they can have.

I am no expert...maybe this already exists... Just wondering what the smart people think about this idea.

[FaustPL]

I think next step should be something like a new component which will act as self-defense mechanism for computers. Component which will constantly check and monitor all what happening in computer, check for viruses/trojans, check for attacks from internet/network. Constanly checking all aplications/Os if something is not trying to send some info to hackers. With all the power that new computers have it should not be hard. It should be hardware not software containing firewall in it as well.
Just my thoughts...