Perspectives
Where the security stack Analogy Breaks
Computer security often assumes cleaner boundaries between system and attacker. Biology contains symbionts, changing tissues and molecular resemblance between self and…
Calling the immune system a security stack is useful for about five minutes. The comparison can expose structure that ordinary language hides. The problem begins when the comparison stops behaving like a tool and starts behaving like a claim about what the thing literally is.
Security engineering contributes useful questions about identity, anomaly detection, layered defense, false positives and memory under uncertainty.
What the metaphor gets right
Security engineering contributes useful questions about identity, anomaly detection, layered defense, false positives and memory under uncertainty.
This is why engineering metaphors are so attractive. They compress a complicated relationship into something we can manipulate mentally. In the best case, the metaphor produces predictions and sharper questions.
What it smuggles in
Computer security often assumes cleaner boundaries between system and attacker. Biology contains symbionts, changing tissues and molecular resemblance between self and non-self.
Engineering words often carry hidden assumptions: a designer, a specification, modular ownership, explicit goals, a stable machine underneath the program. Those assumptions must be tested rather than inherited.
Return to the physical story
Immunity is layered: physical barriers, sensing, innate responses, adaptive recognition, memory and regulation. The system must respond strongly enough to threats while tolerating self and many harmless or beneficial organisms.
Once the mechanism is back in view, the analogy can be kept on a short leash. We can state which relation is genuinely similar and which difference would make the analogy generate a wrong prediction.
My three tests for a metaphor
- What mechanism does this comparison help me see?
- Which engineering assumption does the natural system not share?
- What would I predict incorrectly if I took the comparison literally?
The third test is the most important. An analogy that cannot fail is decoration, not explanation.
Beyond the borrowed language
Immunology grew from observations of acquired protection into cellular and molecular models of recognition, clonal selection and memory.
Immunity shows that biological identity is partly maintained by active, continuous discrimination.
Can a system define self without continuously negotiating its boundary?
A good metaphor should eventually make itself less necessary. It gets us close enough to the real system that we can see where the scaffolding ends.
Reading trail
These links are starting points for the scientific and historical ideas. The systems interpretation, analogies and conclusions here are my own.