Ken Xie Quotes

Antivirus systems need to strike a balance between detecting all possible attacks without causing any false alarms. And while we try to improve on this all the time, there will never be a solution that is 100 percent perfect.

Data leaks are impossible to reverse, so the best strategy is to prevent intruders from having prolonged, unfettered access to the systems in the first place.

Computer security can simply be protecting your equipment and files from disgruntled employees, spies, and anything that goes bump in the night, but there is much more. Computer security helps ensure that your computers, networks, and peripherals work as expected all the time, and that your data is safe in the event of hard disk crash or a power failure resulting from an electrical storm. Computer security also makes sure no damage is done to your data and that no one is able to read it unless you want them to.

In computer circles, any unencrypted data is known as 'cleartext.'

I've always shied away from online data storage. I don't even use my employers' network drives for anything sensitive. I want to control access myself.

There are two types of encryption: one that will prevent your sister from reading your diary and one that will prevent your government.

Security is always going to be a cat and mouse game because there'll be people out there that are hunting for the zero day award, you have people that don't have configuration management, don't have vulnerability management, don't have patch management.

There is no secure data center in the world; they have all been broken into. We can help you prepare for it and minimize the damage when it does occur.

If we start - premise that the information is mine, and we give the individual's rights, we worry about what happens during a breach. If you try to protect access to it, as opposed to not even making it available, you have less to worry about who will break the wall.

Too many public and private entities simply don't take advantage of tools already at their disposal to protect themselves from hackers. No amount of information sharing will help solve that problem.

Increasing cyber-physical system complexity brings security challenges as well as privacy challenges.

While encryption protects against cyberattacks, deploying it in warrant-proof form jeopardizes public safety more generally.

Encryption would help prevent a lot of cyber attacks.

Our view is that if the network is involved, then we are there to protect it. Based on that, future developments will revolve around ensuring data, networks and applications are protected.

Security incidents have gone up 5-10 times during the pandemic, so there is an increased need for security operations risk management, identity and access management, data privacy and compliance.

With security, in the early days, we would just have firewalls and you'd check who could come into the network and who could not.

Every single company knows that there is more that they can do to keep themselves safe from cyber-crime.

We must have the strictest adherence to security procedures to protect against compromise by hostile foreign powers.

If you knew the user, you'd let them in. But, the content could contain a lot of dangerous stuff, even if you know the person using that content, you have to check what's inside there. That's where Fortinet started, trying to go deep inside of content, or inside an application to make sure those were secure.

You no longer can say that inside a company everything is trusted because you could bring in a contaminated device. And it's the same thing with data, because so much is no longer stored inside a company.

If security were all that mattered, computers would never be turned on, let alone hooked into a network with literally millions of potential intruders.

We value integrity of information, we value processes, cyber- security. These are things important to the government.

I generally use 'threat intelligence' when I'm talking about a product packaged and sold by a dedicated commercial entity and 'information sharing' as something that happens between security teams at trusted parties without renumeration.

You know the interesting thing about encryption is that it cannot be secure just for some people.

If a serious and sophisticated attacker has enough time he or she will get into a digital network. Governments and private corporations need to be able to detect an attacker on their network quickly, quarantine him completely and then kick him off.