“Security by Design” in Practice: Assessing Concepts, Definitions, and Approaches
There is significant consensus about the meaning of "security by design," but less on the definition and utility of "security by default."
![](https://lawfare-assets-new.azureedge.net/assets/images/default-source/article-images/security-by-design-locks.jpg?sfvrsn=69b9f679_5)
Published by The Lawfare Institute
in Cooperation With
In this paper for Lawfare's Security by Design Series, Eugenia Lostri and Justin Sherman write that there is significant consensus about the meaning of "security by design," but less on the definition and utility of "security by default." | ![]() |
You can listen to Lostri and Sherman discuss their paper on Lawfare Daily. You can read the paper here or below:
Eugenia Lostri is Lawfare's Fellow in Technology Policy and Law. Prior to joining Lawfare, she was an Associate Fellow at the Center for Strategic and International Studies (CSIS). She also worked for the Argentinian Secretariat for Strategic Affairs, and the City of Buenos Aires’ Undersecretary for International and Institutional Relations. She holds a law degree from the Universidad Católica Argentina, and an LLM in International Law from The Fletcher School of Law and Diplomacy.
Justin Sherman is a contributing editor at Lawfare. He is also the founder and CEO of Global Cyber Strategies, a Washington, DC-based research and advisory firm; a senior fellow at Duke University’s Sanford School of Public Policy, where he runs its research project on data brokerage; and a nonresident fellow at the Atlantic Council.