Vulnerability Management Quotes

A company can spend hundreds of thousands of dollars on firewalls, intrusion detection systems and encryption and other security technologies, but if an attacker can call one trusted person within the company, and that person complies, and if the attacker gets in, then all that money spent on technology is essentially wasted.

Oracle is obsessed with security. It's an absolute requirement for all our products. The real security issue is when customers take older products that were not built for the Internet, and kind of rack them and put them on the Internet.

There are major funding gaps for security research generally, particularly when it comes to defensive security practices and tools that will contribute to the protection and defense of the Internet.

You show you care, you die.You show you fear, you die.You show nothing, maybe you live.

Don't let anyone see your vulnerable spots. Once they knew how to hurt you, they would do it again and again.

You will not even have enough time to go online and download all the patches to your computer before it is infected.

We put up the very best cyber security - what I call infrastructure to stop them, but [hackers] constantly [didn't stop].

If you spend more on coffee than on IT security, you will be hacked. What's more, you deserve to be hacked.

If security were all that mattered, computers would never be turned on, let alone hooked into a network with literally millions of potential intruders.

Vulnerability is basically uncertainty, risk, and emotional exposure.

Because I don't believe that it's really desirable to have security on a computer, I shouldn't be willing to help uphold the security regime.

Computer security can simply be protecting your equipment and files from disgruntled employees, spies, and anything that goes bump in the night, but there is much more. Computer security helps ensure that your computers, networks, and peripherals work as expected all the time, and that your data is safe in the event of hard disk crash or a power failure resulting from an electrical storm. Computer security also makes sure no damage is done to your data and that no one is able to read it unless you want them to.

Second issue is the rapidly accelerating increase in the number of vulnerabilities that get discovered every day. And, equally importantly, is the shortening of time between the discovery of the vulnerability and the release of an exploit.

Mon cher ami, let's not give them any pretext, no matter how small, for judging us!!! Otherwise, we'll be left in shreds. We are forced to take the same precautions as the animal trainer. If, before going into the cage, he has the misfortune to cut himself while shaving, what a feast for the wild animals!!

Software companies should take more responsibility for security holes, especially in browsers and e-mail clients. There are some straightforward things the industry should be doing right now to fix things, and I don't know why they haven't been done yet.

In view of all the deadly computer viruses that have been spreading lately, Weekend Update would like to remind you: when you link up to another computer, you're linking up to every computer that that computer has ever linked up to.

We are extremely vulnerable because we take too much time to implement the necessary measures. This is a painful process. When you go through a painful process - make it as short as possible

Security is always going to be a cat and mouse game because there'll be people out there that are hunting for the zero day award, you have people that don't have configuration management, don't have vulnerability management, don't have patch management.

Building secure products actually makes for a safer world; many people in law enforcement may not agree with that.

As cyber threats evolve, we need to evolve as well.

Nothing is absolute in security.

You can't go to Windows Update and get a patch for stupidity.

In the world of cyber security, the last thing you want is to have a target painted on you.

Cyber Command is supposed to be defending our critical infrastructure at home, but they are spending so much time looking at how to attack networks, how to break systems, and how to turn things off. I don't think it adds up as representing a defensive team.

Too many public and private entities simply don't take advantage of tools already at their disposal to protect themselves from hackers. No amount of information sharing will help solve that problem.