Ken Xie Quotes

With security, in the early days, we would just have firewalls and you'd check who could come into the network and who could not.

Use a personal firewall. Configure it to prevent other computers, networks and sites from connecting to you, and specify which programs are allowed to connect to the net automatically.

'Firewall' seems both scary and protective at the same time. And how often does that happen within one word besides 'military' and 'government?'

This program has been successful in detecting and preventing attacks inside the United States.

Coming back to the topic of computer security, the TCP Wrapper is an example of such a safety net. I wrote it when my systems were under attack by someone who appeared to walk through walls.

Encryption would help prevent a lot of cyber attacks.

Our view is that if the network is involved, then we are there to protect it. Based on that, future developments will revolve around ensuring data, networks and applications are protected.

The threat landscape continues to expand, while cyber threats are continually becoming more sophisticated. This has convinced organizations to expand their security policies and deploy more security solutions.

We need to invest in telecommunication infrastructure with redundancies to combat denial of service attacks.

We need to do whatever we can to defend ourselves against hacking.

I don't expect an overnight change of all desktops to what the US Military used to call B3 level security. And even that would not stop users from shooting themselves into the foot.

First, our focus on security is on the infrastructure itself. So it is all about how you protect the network, the device, and the application that is riding on the server.

Systems are complex, so controlling an attack and achieving a desired level of damage may be harder than using physical weapons.

For about half an hour in mid-1992, I knew as much as any layperson about the pleasures of remote access of other people's computers.

I am regularly asked what the average Internet user can do to ensure his security. My first answer is usually 'Nothing; you're screwed'.

It is impossible to work in information technology without also engaging in social engineering.

New security loopholes are constantly popping up because of wireless networking. The cat-and-mouse game between hackers and system administrators is still in full swing.

Antivirus systems need to strike a balance between detecting all possible attacks without causing any false alarms. And while we try to improve on this all the time, there will never be a solution that is 100 percent perfect.

Security is always going to be a cat and mouse game because there'll be people out there that are hunting for the zero day award, you have people that don't have configuration management, don't have vulnerability management, don't have patch management.

You have to have as many defences in place as you possibly can. But even then of course - and it's important to stress this - you cannot guarantee being able to prevent every attack or every kind of attack.

When you think about things like power efficiency or performance or Internet connectivity as major technology areas where you have multiple investments, multiple products - security is like that.

People are mostly focused on defending the computers on the Internet, and there's been surprisingly little attention to defending the Internet itself as a communications medium.

The only truly secure system is one that is powered off, cast in a block of concrete and sealed in a lead-lined room with armed guards -- and even then I have my doubts.

There is no secure data center in the world; they have all been broken into. We can help you prepare for it and minimize the damage when it does occur.

Everything becomes connected, and cyber security becomes the top issue for CEOs. An average company has 40-60 security vendors, and they have a violation every three months with viruses.