Ken Xie Quotes

I keep my stuff updated all the time. Being in the security industry, I keep up to date with securities.

I characterize myself as a retired hacker. I'm applying what I know to improve security at companies.

I have spent my career building and improving secure, trustworthy systems, and I am very proud to be working on security at Yahoo.

You can't defend. You can't prevent. The only thing you can do is detect and respond.

If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology.

The reality is that there are simply not enough skilled humans available to properly plan, manage, integrate, and optimize security devices, strategies, and protocols.

Being a CISO is a tough job. I have the end responsibility for the personal information of over a billion people.

FusionX's elite team of cyber security experts works at the C-Suite level to help clients test security and see their vulnerabilities through actual replica attacks. This acquisition brings to Accenture the critical ability to help our clients assess and respond to sophisticated cyber-attacks.

If you are a big company, a big website, and lots of users come to your website, you will have attacks, and you have to deal with that. It just cannot be a reason to take actions to exit certain markets.

I get hired by companies to hack into their systems and break into their physical facilities to find security holes. Our success rate is 100%; we've always found a hole.

While there have been terrific advances in the state of technology around heuristics, behavior blocking, and things like that, technology is only a part of the approach to solving the problem with the more important aspect involving putting the right process in place.

I learned the technology and tradecraft of electronic security in self defense, with a lot of expert help.

I'm just not security-minded.

What we are seeing now is customers shifting their attention from security products like firewalls and intrusion sensors, to the policies that need to be in place, and the technologies that help them enforce policy compliance.

Security today is important, but 90 percent of security involves other co functions of government.

Small businesses are the backbone of the American economy and employ almost half of the working population. Yet because of their size, they rarely have access to the same information security resources as large firms.

Security is job number one for Intel and our industry.

People now know how important it is to build secure systems to underlie our civilization.

Security people aren't brilliant; we aren't smarter than everyone else.

Any security issues, you have to be very hands on to really understand what's the exact problem, and then take quick action.

I generally use 'threat intelligence' when I'm talking about a product packaged and sold by a dedicated commercial entity and 'information sharing' as something that happens between security teams at trusted parties without renumeration.

For most companies, they don't want to ever talk about security unless it's an absolute emergency and they've had a breach. And I think that's a mistake.

The threat landscape continues to expand, while cyber threats are continually becoming more sophisticated. This has convinced organizations to expand their security policies and deploy more security solutions.

There are major funding gaps for security research generally, particularly when it comes to defensive security practices and tools that will contribute to the protection and defense of the Internet.

A computer shall not harm your work or, through inaction, allow your work to come to harm.