Alex Stamos Quotes

Increasing cyber-physical system complexity brings security challenges as well as privacy challenges.

I don't expect an overnight change of all desktops to what the US Military used to call B3 level security. And even that would not stop users from shooting themselves into the foot.

What happens with smaller businesses is that they give in to the misconception that their site is secure because the system administrator deployed standard security products - firewalls, intrusion detection systems, or stronger authentication devices such as time-based tokens or biometric smart cards. But those things can be exploited.

If someone hacks your password, you can change it - as many times as you want. You can't change your fingerprints. You have only ten of them. And you leave them on everything you touch; they are definitely not a secret.

There is no data base that is totally secure. The hackers are always one step ahead and have a vested interest in obtaining the data.

I talked to the general counsel of the DNC, and he assures me that every step along the way, when we were notified of these issues, that we changed systems, changed procedures, but these hackers are so sophisticated that they changed procedures.

If a serious and sophisticated attacker has enough time he or she will get into a digital network. Governments and private corporations need to be able to detect an attacker on their network quickly, quarantine him completely and then kick him off.

I think every organization needs to assume that they are compromised.

Businesses should absolutely set aside funding in their budgets for security consultants. Unless there is an expert on staff, and there usually is not, it needs to be outsourced.

So ensuring the integrity of the data and integrity and validity of the connection is a very important element in any company's strategy that is moving towards a Web service paradigm.

New security loopholes are constantly popping up because of wireless networking. The cat-and-mouse game between hackers and system administrators is still in full swing.

Mobile phones are one of the most insecure devices that were ever available, so they're very easy to trace; they're very easy to tap.

Security is always going to be a cat and mouse game because there'll be people out there that are hunting for the zero day award, you have people that don't have configuration management, don't have vulnerability management, don't have patch management.

First, I do not think there is any silver bullet to solving the technology side of the security equation.

You have to have as many defences in place as you possibly can. But even then of course - and it's important to stress this - you cannot guarantee being able to prevent every attack or every kind of attack.

If someone hacks your password, you can change it - as many times as you want.

The most important impact of technology on communications security is that it draws better and better traffic into vulnerable channels.

I think a lot of stuff like people's emails getting hacked or that an email you sent is stored on a hard drive somewhere, that kind of stuff worries me a little bit. It's a weird thought that someone else could get into my information that easily. That stuff's pretty scary.

Cloud computing is a challenge to security, but one that can be overcome.

If I needed to know about a security exploit, I preferred to get the information by accessing the companies' security teams' files, rather than poring over lines of code to find it on my own. It's just more efficient.

If you don't treat [computer and Internet] security like a religious fanatic, you are going to be hurt like you can't imagine.

Data leaks are impossible to reverse, so the best strategy is to prevent intruders from having prolonged, unfettered access to the systems in the first place.

National security always matters, obviously. But the reality is that if you have an open door in your software for the good guys, the bad guys get in there, too.

Nobody should be too boastful or too proud about their security because there are people who have a major interest in cracking the security of networks, the security of companies.

When hackers have access to powerful computers that use brute force hacking, they can crack almost any password; even one user with insecure access being successfully hacked can result in a major breach.