Gene Spafford Quotes

It's simply unrealistic to depend on secrecy for security in computer software. You may be able to keep the exact workings of the program out of general circulation, but can you prevent the code from being reverse-engineered by serious opponents? Probably not. The secret to strong security: less reliance on secrets.

Data leaks are impossible to reverse, so the best strategy is to prevent intruders from having prolonged, unfettered access to the systems in the first place.

We value integrity of information, we value processes, cyber- security. These are things important to the government.

Our view is that if the network is involved, then we are there to protect it. Based on that, future developments will revolve around ensuring data, networks and applications are protected.

Security can be enhanced with hardware. You can have a software-only solution, but it can be made more robust in conjunction with hardware.

They have a beautiful security system and we're emulating the whole security infrastructure.

I learned the technology and tradecraft of electronic security in self defense, with a lot of expert help.

'Firewall' seems both scary and protective at the same time. And how often does that happen within one word besides 'military' and 'government?'

You have to have as many defences in place as you possibly can. But even then of course - and it's important to stress this - you cannot guarantee being able to prevent every attack or every kind of attack.

There are two kinds of cryptography in this world: cryptography that will stop your kid sister from reading your files, and cryptography that will stop major governments from reading your files.

There is no secure data center in the world; they have all been broken into. We can help you prepare for it and minimize the damage when it does occur.

Too many public and private entities simply don't take advantage of tools already at their disposal to protect themselves from hackers. No amount of information sharing will help solve that problem.

Every single company knows that there is more that they can do to keep themselves safe from cyber-crime.

I have spent my career building and improving secure, trustworthy systems, and I am very proud to be working on security at Yahoo.

First, our focus on security is on the infrastructure itself. So it is all about how you protect the network, the device, and the application that is riding on the server.

Security is, I would say, our top priority because for all the exciting things you will be able to do with computers - organizing your lives, staying in touch with people, being creative - if we don't solve these security problems, then people will hold back.

Security is like virginity: you're either a virgin or you're not. You either have security or you don't.

It was immediately clear to me that security was a cross-cutting issue, so rather than dividing the space up in parallel with each of the other areas, I wanted security cut across the areas in addition to having its own content.

It's as if our electric grid didn't even have fences around it. This is disgraceful what we do, and what we don't do, to protect the Internet.

Security is always going to be a cat and mouse game because there'll be people out there that are hunting for the zero day award, you have people that don't have configuration management, don't have vulnerability management, don't have patch management.

Everyone is a proponent of strong encryption.

The most important impact of technology on communications security is that it draws better and better traffic into vulnerable channels.

When you put new security measures in place there is a greater time lag than before.

There are security risks not only from information falling into the wrong hands, but also from information failing to find its way into the right hands. The government’s current approach to protecting classified information does not recognize this risk from failing to share

The more urgent the message, the more slowly it moves—but those are the penalties of security.