John W. Thompson Quotes

We have a reliable computerized network devoted to counterterrorist activities.

Most people assume that once security software is installed, they're protected. This isn't the case. It's critical that companies be proactive in thinking about security on a long-term basis.

You can't defend. You can't prevent. The only thing you can do is detect and respond.

McAfee's No. 1 strength is that they have a fantastic R&D team, engineering, as well as research at the core of security: database threat management.

To prevent a crippling attack on our nation's critical networks, U.S. companies and the federal government must work together to combat those who wish to do us harm.

The whole information and communication technologies (ICT) infrastructure must be regarded as an 'ecosystem' in which everything is interconnected. It functions as a whole; it must be defended as a whole.

Building secure products actually makes for a safer world; many people in law enforcement may not agree with that.

Terrorists remain determined to find a weakness in our defence... To stay ahead of the terrorists, I call on the international community, the private sector, and academia to share knowledge, expertise, and resources to prevent new technologies becoming lethal terrorist weapons.

Security is an endless race - one that you can lead but never decisively win. Yesterday's best defenses cannot fend off the attacks of today or tomorrow.

Ninety percent of cyber security companies begin in the detection stage. The issue is there are so many applications and alarming messages it is difficult for the user or the administrator to manage.

We must have the strictest adherence to security procedures to protect against compromise by hostile foreign powers.

As cyber threats evolve, we need to evolve as well.

The question is, really, does the nonexistence of another attack prove that the programs that are in place are working?

There are major funding gaps for security research generally, particularly when it comes to defensive security practices and tools that will contribute to the protection and defense of the Internet.

The guardians of your company's cyber security should be encouraged to network within the industry to swap information on the latest hacker tricks and most effective defenses.

It was immediately clear to me that security was a cross-cutting issue, so rather than dividing the space up in parallel with each of the other areas, I wanted security cut across the areas in addition to having its own content.

I learned the technology and tradecraft of electronic security in self defense, with a lot of expert help.

This program has been successful in detecting and preventing attacks inside the United States.

Nothing is absolute in security.

Personally, I tend to be more interested in security and performance-related issues than other things.

We think the managed security services opportunity is enormous and so we have been an active participant and probably the largest firm in this space outside of an IBM or EDS, which does large outsourcing contracts.

You have to have as many defences in place as you possibly can. But even then of course - and it's important to stress this - you cannot guarantee being able to prevent every attack or every kind of attack.

Defending against military-strength malware is a real challenge for the computer security industry. Furthermore, the security industry is not global. It is highly focused in just a handful of countries. The rest of the countries rely on foreign security labs to provide their everyday digital security for them.

If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology.

Snowden was extremely good at digital self-defense. When he was employed by the C.I.A. and N.S.A., one of his jobs was to teach U.S. national security officials and C.I.A. employees how to protect their data in high-threat digital environments.