Ken Xie Quotes

Every single company knows that there is more that they can do to keep themselves safe from cyber-crime.

The only truly secure system is one that is powered off, cast in a block of concrete and sealed in a lead-lined room with armed guards -- and even then I have my doubts.

Computer security can simply be protecting your equipment and files from disgruntled employees, spies, and anything that goes bump in the night, but there is much more. Computer security helps ensure that your computers, networks, and peripherals work as expected all the time, and that your data is safe in the event of hard disk crash or a power failure resulting from an electrical storm. Computer security also makes sure no damage is done to your data and that no one is able to read it unless you want them to.

You have to have as many defences in place as you possibly can. But even then of course - and it's important to stress this - you cannot guarantee being able to prevent every attack or every kind of attack.

Cloud computing is a challenge to security, but one that can be overcome.

Data leaks are impossible to reverse, so the best strategy is to prevent intruders from having prolonged, unfettered access to the systems in the first place.

There is no secure data center in the world; they have all been broken into. We can help you prepare for it and minimize the damage when it does occur.

Effective cyber-security should be considered an investment.

We value integrity of information, we value processes, cyber- security. These are things important to the government.

If a serious and sophisticated attacker has enough time he or she will get into a digital network. Governments and private corporations need to be able to detect an attacker on their network quickly, quarantine him completely and then kick him off.

I think every organization needs to assume that they are compromised.

With security, in the early days, we would just have firewalls and you'd check who could come into the network and who could not.

I don't expect an overnight change of all desktops to what the US Military used to call B3 level security. And even that would not stop users from shooting themselves into the foot.

First, our focus on security is on the infrastructure itself. So it is all about how you protect the network, the device, and the application that is riding on the server.

They have a beautiful security system and we're emulating the whole security infrastructure.

Security is like virginity: you're either a virgin or you're not. You either have security or you don't.

It was immediately clear to me that security was a cross-cutting issue, so rather than dividing the space up in parallel with each of the other areas, I wanted security cut across the areas in addition to having its own content.

I learned the technology and tradecraft of electronic security in self defense, with a lot of expert help.

I'm just not security-minded.

It's as if our electric grid didn't even have fences around it. This is disgraceful what we do, and what we don't do, to protect the Internet.

So ensuring the integrity of the data and integrity and validity of the connection is a very important element in any company's strategy that is moving towards a Web service paradigm.

It's simply unrealistic to depend on secrecy for security in computer software. You may be able to keep the exact workings of the program out of general circulation, but can you prevent the code from being reverse-engineered by serious opponents? Probably not. The secret to strong security: less reliance on secrets.

'Firewall' seems both scary and protective at the same time. And how often does that happen within one word besides 'military' and 'government?'

Security is always going to be a cat and mouse game because there'll be people out there that are hunting for the zero day award, you have people that don't have configuration management, don't have vulnerability management, don't have patch management.

What we are seeing now is customers shifting their attention from security products like firewalls and intrusion sensors, to the policies that need to be in place, and the technologies that help them enforce policy compliance.