Christopher A. Wray Quotes

Security is an endless race - one that you can lead but never decisively win. Yesterday's best defenses cannot fend off the attacks of today or tomorrow.

There are major funding gaps for security research generally, particularly when it comes to defensive security practices and tools that will contribute to the protection and defense of the Internet.

The guardians of your company's cyber security should be encouraged to network within the industry to swap information on the latest hacker tricks and most effective defenses.

Too many public and private entities simply don't take advantage of tools already at their disposal to protect themselves from hackers. No amount of information sharing will help solve that problem.

Every single company knows that there is more that they can do to keep themselves safe from cyber-crime.

The question is, really, does the nonexistence of another attack prove that the programs that are in place are working?

Computer security can simply be protecting your equipment and files from disgruntled employees, spies, and anything that goes bump in the night, but there is much more. Computer security helps ensure that your computers, networks, and peripherals work as expected all the time, and that your data is safe in the event of hard disk crash or a power failure resulting from an electrical storm. Computer security also makes sure no damage is done to your data and that no one is able to read it unless you want them to.

Most people assume that once security software is installed, they're protected. This isn't the case. It's critical that companies be proactive in thinking about security on a long-term basis.

Ninety percent of cyber security companies begin in the detection stage. The issue is there are so many applications and alarming messages it is difficult for the user or the administrator to manage.

We must have the strictest adherence to security procedures to protect against compromise by hostile foreign powers.

If security were all that mattered, computers would never be turned on, let alone hooked into a network with literally millions of potential intruders.

We put up the very best cyber security - what I call infrastructure to stop them, but [hackers] constantly [didn't stop].

Without those hackers, we wouldn't solve the problems we need to solve, especially security.

We have a reliable computerized network devoted to counterterrorist activities.

I keep my stuff updated all the time. Being in the security industry, I keep up to date with securities.

While there have been terrific advances in the state of technology around heuristics, behavior blocking, and things like that, technology is only a part of the approach to solving the problem with the more important aspect involving putting the right process in place.

You can't defend. You can't prevent. The only thing you can do is detect and respond.

I learned the technology and tradecraft of electronic security in self defense, with a lot of expert help.

Nothing is absolute in security.

Security is always going to be a cat and mouse game because there'll be people out there that are hunting for the zero day award, you have people that don't have configuration management, don't have vulnerability management, don't have patch management.

You have to have as many defences in place as you possibly can. But even then of course - and it's important to stress this - you cannot guarantee being able to prevent every attack or every kind of attack.

To prevent a crippling attack on our nation's critical networks, U.S. companies and the federal government must work together to combat those who wish to do us harm.

Cybersecurity needs to be taken seriously by everyone.

Building secure products actually makes for a safer world; many people in law enforcement may not agree with that.