Barton Gellman Quotes

Security is like virginity: you're either a virgin or you're not. You either have security or you don't.

There is no such thing as perfect security, only varying levels of insecurity.

Security is always going to be a cat and mouse game because there'll be people out there that are hunting for the zero day award, you have people that don't have configuration management, don't have vulnerability management, don't have patch management.

Security incidents have gone up 5-10 times during the pandemic, so there is an increased need for security operations risk management, identity and access management, data privacy and compliance.

Security is, I would say, our top priority because for all the exciting things you will be able to do with computers - organizing your lives, staying in touch with people, being creative - if we don't solve these security problems, then people will hold back.

They have a beautiful security system and we're emulating the whole security infrastructure.

It was immediately clear to me that security was a cross-cutting issue, so rather than dividing the space up in parallel with each of the other areas, I wanted security cut across the areas in addition to having its own content.

I learned the technology and tradecraft of electronic security in self defense, with a lot of expert help.

I'm just not security-minded.

So ensuring the integrity of the data and integrity and validity of the connection is a very important element in any company's strategy that is moving towards a Web service paradigm.

You have to have as many defences in place as you possibly can. But even then of course - and it's important to stress this - you cannot guarantee being able to prevent every attack or every kind of attack.

Data leaks are impossible to reverse, so the best strategy is to prevent intruders from having prolonged, unfettered access to the systems in the first place.

Security is a human problem.

Security is job number one for Intel and our industry.

We value integrity of information, we value processes, cyber- security. These are things important to the government.

Any security issues, you have to be very hands on to really understand what's the exact problem, and then take quick action.

First, our focus on security is on the infrastructure itself. So it is all about how you protect the network, the device, and the application that is riding on the server.

Technology businesses in general are susceptible to hacking. That's why you have to work really, really, really hard with law enforcement, with security experts, internal and external groups, to make sure you're paying attention and addressing security concerns.

What happens with smaller businesses is that they give in to the misconception that their site is secure because the system administrator deployed standard security products - firewalls, intrusion detection systems, or stronger authentication devices such as time-based tokens or biometric smart cards. But those things can be exploited.

While there have been terrific advances in the state of technology around heuristics, behavior blocking, and things like that, technology is only a part of the approach to solving the problem with the more important aspect involving putting the right process in place.

You can't defend. You can't prevent. The only thing you can do is detect and respond.

It's as if our electric grid didn't even have fences around it. This is disgraceful what we do, and what we don't do, to protect the Internet.

It's simply unrealistic to depend on secrecy for security in computer software. You may be able to keep the exact workings of the program out of general circulation, but can you prevent the code from being reverse-engineered by serious opponents? Probably not. The secret to strong security: less reliance on secrets.

First, I do not think there is any silver bullet to solving the technology side of the security equation.

Cloud computing is a challenge to security, but one that can be overcome.