Reply to thread

Per Wikipedia: http://en.wikipedia.org/wiki/Computer_security#Security_architecture

 

Security Architecture can be defined as the design artifacts that describe how the security controls (security countermeasures) are positioned, and how they relate to the overall information technology architecture. These controls serve the purpose to maintain the system's quality attributes, among them confidentiality, integrity, availability, accountability and assurance.

 

Basically, security was designed from the ground up and from the beginning of development. Some older applications may not have had security built in from the ground up and added as an enhancement.

 

The difference is that when you add it later on is that it's not as embedded and integrated as if it was from the beginning.

 

Think of it as a car unibody frame. After the car is finished, you can try to strengthen the frame, but it would not be as lightweight and strong as if it was designed from the get go with the right material.