Jonathan Zittrain Quotes

If you don't treat [computer and Internet] security like a religious fanatic, you are going to be hurt like you can't imagine.

Everything becomes connected, and cyber security becomes the top issue for CEOs. An average company has 40-60 security vendors, and they have a violation every three months with viruses.

If a serious and sophisticated attacker has enough time he or she will get into a digital network. Governments and private corporations need to be able to detect an attacker on their network quickly, quarantine him completely and then kick him off.

What you really want is for a cyberattack to be very costly and risky so it is used only rarely and only against really high-value targets.

Protecting yourself is very challenging in the hostile environment of the Internet. Imagine a global environment where an unscrupulous person from the other side of the planet can probe your computer for weaknesses and exploit them to gain access to your most sensitive secrets.

Nine out of every 10 large corporations and government agencies have been attacked by computer intruders.

Your company is probably going to get hacked. The velocity and complexity of hacking attempts has skyrocketed, with companies routinely facing millions of knocks on the vault door.

There is no data base that is totally secure. The hackers are always one step ahead and have a vested interest in obtaining the data.

Nobody should be too boastful or too proud about their security because there are people who have a major interest in cracking the security of networks, the security of companies.

When a hacker gains access to any corporate data, the value of that data depends on which server, or sometimes a single person's computer, that the hacker gains access to.

Cyberattacks have long been hard to stop because determining where they come from takes time - and sometimes the mystery is never solved.

No computer or smartphone can ever be considered 100 percent 'safe.' We're all engaged in a perpetual battle with criminals and hostile governments trying to use computers and the Internet to steal information and identities.

I talked to the general counsel of the DNC, and he assures me that every step along the way, when we were notified of these issues, that we changed systems, changed procedures, but these hackers are so sophisticated that they changed procedures.

There are two types of companies: those that have been hacked, and those who don't know they have been hacked.

After the investigation of Operation Aurora, the cyberattack on Google from within China that was revealed in 2010, I realized a completely new type of security strategy and technology was needed.

You don't want to wake up and find out that your watch was hacked, that your thermostat was hacked, that your coffeemaker was hacked.

Cyber terrorism could also become more attractive as the real and virtual worlds become more closely coupled, with automobiles, appliances, and other devices attached to the Internet.

We've already seen digital picture frames pre-loaded with viruses; I'm not eager to have my refrigerator hacked or my alarm clock turned against me.

One bug in an SMTP server can open up the whole machine for intrusion.

How many of the 'Fortune' 500 are hacked? 500.

It's as if our electric grid didn't even have fences around it. This is disgraceful what we do, and what we don't do, to protect the Internet.

New security loopholes are constantly popping up because of wireless networking. The cat-and-mouse game between hackers and system administrators is still in full swing.

The FBI is engaged in a myriad of efforts to combat cyber threats, from efforts focused on threat identification and sharing inside and outside of government, to our internal emphasis on developing and retaining new talent and changing the way we operate to evolve with the cyber threat.

Data leaks are impossible to reverse, so the best strategy is to prevent intruders from having prolonged, unfettered access to the systems in the first place.

Deterrence is … a weak tool in the increasingly important realm of cyberspace, where it can be extremely difficult to be absolutely sure of an attacker’s identity.