Kevin Mitnick Quotes

The reality is that there are simply not enough skilled humans available to properly plan, manage, integrate, and optimize security devices, strategies, and protocols.

Well, the security business has been growing. I think security is one of those areas where it's to some degree not linear but maybe exponential growth.

I won't be satisfied until I've put the entire security industry out of work.

I characterize myself as a retired hacker. I'm applying what I know to improve security at companies.

If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology.

We're going to become the number one security company.

The threat landscape continues to expand, while cyber threats are continually becoming more sophisticated. This has convinced organizations to expand their security policies and deploy more security solutions.

Most people assume that once security software is installed, they're protected. This isn't the case. It's critical that companies be proactive in thinking about security on a long-term basis.

Personally, I tend to be more interested in security and performance-related issues than other things.

What we are seeing now is customers shifting their attention from security products like firewalls and intrusion sensors, to the policies that need to be in place, and the technologies that help them enforce policy compliance.

A lot of companies are clueless, because they spend most or all of their security budget on high-tech security like fire walls and biometric authentication - which are important and needed - but then they don't train their people.

Becoming an effective security professional requires more than knowing how to deploy and configure technology. It requires combining security theory with practical, hands-on experience.

For most companies, they don't want to ever talk about security unless it's an absolute emergency and they've had a breach. And I think that's a mistake.

Security is an endless race - one that you can lead but never decisively win. Yesterday's best defenses cannot fend off the attacks of today or tomorrow.

I'm also the chairman of the board of Symantec, which is the world's largest cybersecurity - software cybersecurity company.

Security used to be an inconvenience sometimes, but now it's a necessity all the time.

It's certainly easier to implement bad security and make it illegal for anyone to notice than it is to implement good security.

We have problems with our physical security, operational security through to management.

While there have been terrific advances in the state of technology around heuristics, behavior blocking, and things like that, technology is only a part of the approach to solving the problem with the more important aspect involving putting the right process in place.

The guardians of your company's cyber security should be encouraged to network within the industry to swap information on the latest hacker tricks and most effective defenses.

You can't defend. You can't prevent. The only thing you can do is detect and respond.

It was immediately clear to me that security was a cross-cutting issue, so rather than dividing the space up in parallel with each of the other areas, I wanted security cut across the areas in addition to having its own content.

I learned the technology and tradecraft of electronic security in self defense, with a lot of expert help.

McAfee's No. 1 strength is that they have a fantastic R&D team, engineering, as well as research at the core of security: database threat management.

Businesses should absolutely set aside funding in their budgets for security consultants. Unless there is an expert on staff, and there usually is not, it needs to be outsourced.