Bruce Schneier Quotes

I keep my stuff updated all the time. Being in the security industry, I keep up to date with securities.

A lot of companies are clueless, because they spend most or all of their security budget on high-tech security like fire walls and biometric authentication - which are important and needed - but then they don't train their people.

Security used to be an inconvenience sometimes, but now it's a necessity all the time.

Security is a process, not a product.

Security isn't just a feature, it's a base, it's a fundamental, right.

We have problems with our physical security, operational security through to management.

Most people assume that once security software is installed, they're protected. This isn't the case. It's critical that companies be proactive in thinking about security on a long-term basis.

Well, the security business has been growing. I think security is one of those areas where it's to some degree not linear but maybe exponential growth.

We're going to become the number one security company.

For most companies, they don't want to ever talk about security unless it's an absolute emergency and they've had a breach. And I think that's a mistake.

The key to security is public information.

I won't be satisfied until I've put the entire security industry out of work.

Businesses should absolutely set aside funding in their budgets for security consultants. Unless there is an expert on staff, and there usually is not, it needs to be outsourced.

It's simply unrealistic to depend on secrecy for security in computer software. You may be able to keep the exact workings of the program out of general circulation, but can you prevent the code from being reverse-engineered by serious opponents? Probably not. The secret to strong security: less reliance on secrets.

If you accept that security is a process, and if you can eliminate the human interaction or intervention in that process by automating more, that is a good thing.

When you put new security measures in place there is a greater time lag than before.

The safety and security of the nation depends more so than ever before on intelligence.

The only truly secure system is one that is powered off, cast in a block of concrete and sealed in a lead-lined room with armed guards -- and even then I have my doubts.

The reality is that there are simply not enough skilled humans available to properly plan, manage, integrate, and optimize security devices, strategies, and protocols.

Technology companies have a front-line responsibility to secure their own networks, products, and platforms.

Security is an endless race - one that you can lead but never decisively win. Yesterday's best defenses cannot fend off the attacks of today or tomorrow.

As cyber threats evolve, we need to evolve as well.

I'm also the chairman of the board of Symantec, which is the world's largest cybersecurity - software cybersecurity company.

I would be shocked by the lack of security if we were not at Amity headquarters. They often straddle the line between trust and stupidity.

US intelligence agencies will only use such data to meet specific security requirements: counterintelligence, counterterrorism, counterproliferation, cybersecurity, force protection for our troops and allies, and combating transnational crime, including sanctions evasion.