Nathan Blecharczyk Quotes

If you are a big company, a big website, and lots of users come to your website, you will have attacks, and you have to deal with that. It just cannot be a reason to take actions to exit certain markets.

They have a beautiful security system and we're emulating the whole security infrastructure.

While there have been terrific advances in the state of technology around heuristics, behavior blocking, and things like that, technology is only a part of the approach to solving the problem with the more important aspect involving putting the right process in place.

I learned the technology and tradecraft of electronic security in self defense, with a lot of expert help.

Nothing is absolute in security.

The threat landscape continues to expand, while cyber threats are continually becoming more sophisticated. This has convinced organizations to expand their security policies and deploy more security solutions.

We must have the strictest adherence to security procedures to protect against compromise by hostile foreign powers.

The question is, really, does the nonexistence of another attack prove that the programs that are in place are working?

I keep my stuff updated all the time. Being in the security industry, I keep up to date with securities.

Most people assume that once security software is installed, they're protected. This isn't the case. It's critical that companies be proactive in thinking about security on a long-term basis.

You can't defend. You can't prevent. The only thing you can do is detect and respond.

It was immediately clear to me that security was a cross-cutting issue, so rather than dividing the space up in parallel with each of the other areas, I wanted security cut across the areas in addition to having its own content.

Security is always going to be a cat and mouse game because there'll be people out there that are hunting for the zero day award, you have people that don't have configuration management, don't have vulnerability management, don't have patch management.

Personally, I tend to be more interested in security and performance-related issues than other things.

You have to have as many defences in place as you possibly can. But even then of course - and it's important to stress this - you cannot guarantee being able to prevent every attack or every kind of attack.

Data leaks are impossible to reverse, so the best strategy is to prevent intruders from having prolonged, unfettered access to the systems in the first place.

Our security strategies have not yet caught up with the risks we are facing. The globalization that has swept away the barriers to the movement of goods, ideas and people has also swept with it barriers that confined and localized security threats.

The only truly secure system is one that is powered off, cast in a block of concrete and sealed in a lead-lined room with armed guards -- and even then I have my doubts.

Security today is important, but 90 percent of security involves other co functions of government.

'Cyber-security' is one of those hot topics that has launched a thousand seminars and strategy papers without producing much in the way of policy.

Security is job number one for Intel and our industry.

Safety is not just about trying really hard and being really careful. You have to design technology that makes it possible for a computer to be safe.

We value integrity of information, we value processes, cyber- security. These are things important to the government.

Any security issues, you have to be very hands on to really understand what's the exact problem, and then take quick action.

There's always some potential vulnerabilities in any system.