David Ignatius Quotes

It's as if our electric grid didn't even have fences around it. This is disgraceful what we do, and what we don't do, to protect the Internet.

Cybersecurity needs to be taken seriously by everyone.

Technology businesses in general are susceptible to hacking. That's why you have to work really, really, really hard with law enforcement, with security experts, internal and external groups, to make sure you're paying attention and addressing security concerns.

Security is like virginity: you're either a virgin or you're not. You either have security or you don't.

If you wanna know how not secure you are, just take a look around. Nothing's secure. Nothing's safe. I don't hate technology, I don't hate hackers, because that's just what comes with it, without those hackers we wouldn't solve the problems we need to solve, especially security.

I'm just not security-minded.

Data leaks are impossible to reverse, so the best strategy is to prevent intruders from having prolonged, unfettered access to the systems in the first place.

National security always matters, obviously. But the reality is that if you have an open door in your software for the good guys, the bad guys get in there, too.

No computer or smartphone can ever be considered 100 percent 'safe.' We're all engaged in a perpetual battle with criminals and hostile governments trying to use computers and the Internet to steal information and identities.

I talked to the general counsel of the DNC, and he assures me that every step along the way, when we were notified of these issues, that we changed systems, changed procedures, but these hackers are so sophisticated that they changed procedures.

You fight technology with technology, so you have to stay one step ahead of the criminal. It's very much a chess game - they make a move, you have to make a move.

In Internet in general, there are security, privacy, and many other issues.

After the investigation of Operation Aurora, the cyberattack on Google from within China that was revealed in 2010, I realized a completely new type of security strategy and technology was needed.

If a serious and sophisticated attacker has enough time he or she will get into a digital network. Governments and private corporations need to be able to detect an attacker on their network quickly, quarantine him completely and then kick him off.

What happens with smaller businesses is that they give in to the misconception that their site is secure because the system administrator deployed standard security products - firewalls, intrusion detection systems, or stronger authentication devices such as time-based tokens or biometric smart cards. But those things can be exploited.

They have a beautiful security system and we're emulating the whole security infrastructure.

Attacks on Internet sites and infrastructure, and the compromise of secure information, pose a particularly tricky problem because it is usually impossible to trace an attack back to its instigator.

Some brains are easy to hack into, and other brains are nearly impossible to hack into because they are so complex.

Protecting yourself is very challenging in the hostile environment of the Internet. Imagine a global environment where an unscrupulous person from the other side of the planet can probe your computer for weaknesses and exploit them to gain access to your most sensitive secrets.

Nine out of every 10 large corporations and government agencies have been attacked by computer intruders.

If you go to a coffee shop or at the airport, and you're using open wireless, I would use a VPN service that you could subscribe for 10 bucks a month. Everything is encrypted in an encryption tunnel, so a hacker cannot tamper with your connection.

How many of the 'Fortune' 500 are hacked? 500.

Security is always going to be a cat and mouse game because there'll be people out there that are hunting for the zero day award, you have people that don't have configuration management, don't have vulnerability management, don't have patch management.

First, I do not think there is any silver bullet to solving the technology side of the security equation.

You have to have as many defences in place as you possibly can. But even then of course - and it's important to stress this - you cannot guarantee being able to prevent every attack or every kind of attack.