From: Michal Suchanek <hramrach@...>
Date: 2011-10-24T16:47:55+09:00
Subject: Re: security thesis advice

On 24 October 2011 02:45, Jorge Bo <jorgebo10@gmail.com> wrote:
> Actually, i had an idea about building security on-demand...sounds a little
> weird, but i was thinking about building security in an application in an
> spiral way. Lets say starting with minimum security and based on the attacks
> patterns allow the application to modify its own code to apply security
> contermeasures, relying on Ruby metaprogramming...
> I guess it could be of more theoretical value than practical one, however
> its something which has been revolving my mind for a long time...

This is fundamentally impossible.

Once your application starts insecure it cannot be secured.

Thanks

Michal