Clik here to view.
Welcome
When Pete Wood posted his thoughts on the hot security topics for 2010, I started thinking about a response, and decided it was too long for a comment. So instead it’s galvanised me into action to...
View ArticleClik here to view.
On Security Awareness
“It’s increasingly obvious that technical controls alone are not providing organisations with the security they need. Staff education and awareness, delivered in a creative and imaginative way, is...
View ArticleClik here to view.
On Cloud Computing
“Few organisations are giving serious consideration to the security risks inherent in the cloud computing model. Whilst day-to-day operations can be outsourced in this way, the responsibility for...
View ArticleClik here to view.
On cybercrime
Organisations continue to underestimate the devious nature of cyber criminals and have little or no commitment to “thinking like a hacker“. This mind set is critical in order to apply budget and...
View ArticleClik here to view.
How did this happen?
As reported by the US-CERT, it seems that even a USB battery charger (neat idea, BTW) can carry malware. It seems like the last thing you’d expect to have enough complexity to be a risk, but the...
View ArticleClik here to view.
Article 3
On the excellent TaoSecurity blog, Richard Bejtlich says “forget ROI and risk. Consider competitive advantage.” ROI is incredibly hard to justify for security programs. You’re trying to find a way of...
View ArticleClik here to view.
You have to wonder what the world is coming to…
…when Bruce Schneier is quoting Jeremy Clarkson. Then again, both of them are good at challenging obvious stupidity.
View ArticleClik here to view.
Infosec policies are stuck in the last century
I work for a company that has a policy that prohibits unauthorised WiFi access points on company premises. OK, this implies “connected to the corporate network”. But I’ve just purchased a Huawei MiFi...
View ArticleClik here to view.
Security Vendors: mostly awful.
I hate to admit it, but they are. Security technology is still stuck somewhere around 1997 – stateful packet inspection firewalls and frottabytes of logs that no-one can get meaningful data out of. OK,...
View Article
