Nothing Is Good Enough: Fast and Cheap Are Undervalued as Influencers of Security Tool Adoption
Adam Shostack · IEEE Security & Privacy · 2023
Properties of practices in industrial use are rarely studied. Security workers satisfice, selecting a tool that’s “good enough,” and in practice, that turns out to be nothing at all. This article advocates valuing lightweight methods and presents studies and evaluation criteria for such tools.