Collaborate Disseminate
Anyone involved in cybersecurity reporting needs a strong sense of numeracy, or mathematical literacy. I see two sorts of examples of innumeracy repeatedly in the media.The first involves the time value of money. Recently CNN claimed Amazon CEO Jeff Be… Continue reading Addressing Innumeracy in Reporting
Last week I Tweeted the following on the 8th anniversary of Google’s blog post about its compromise by Chinese threat actors:This intrusion made the term APT mainstream. I was the first to associate it with Aurora, in this post https://taosecurity… Continue reading Remembering When APT Became Public
Today, 8 January 2018, is the 15th birthday of TaoSecurity Blog! This is also my 3,020th blog post.I wrote my first post on 8 January 2003 while working as an incident response consultant for Foundstone.I don’t believe I’ve released statistics for the … Continue reading Happy 15th Birthday TaoSecurity Blog
Longtime readers know that I have no problem with foreign countries replacing American vendors with local alternatives. For example, see Five Reasons I Want China Running Its Own Software. This is not a universal principle, but as an American I am fine… Continue reading Spectre and Meltdown from a CNO Perspective
Longtime readers know that I have no problem with foreign countries replacing American vendors with local alternatives. For example, see Five Reasons I Want China Running Its Own Software. This is not a universal principle, but as an American I am fine… Continue reading Spectre and Meltdown from a CNO Perspective
My TaoSecurity News page says I taught 41 classes lasting a day or more, from 2002 to 2014. All of these involved some aspect of network security monitoring (NSM). Many times students would ask me when I would create the “advanced” version of the class… Continue reading On "Advanced" Network Security Monitoring
I am hopeful that President Trump will not block release of the remaining classified documents addressing the 1963 assassination of President John F. Kennedy. I grew up a Roman Catholic in Massachusetts, so President Kennedy always fascinated me.The 19… Continue reading How to Minimize Leaking
Thursday evening Mrs B and I were pleased to attend an awards seminar for the Cybersecurity Canon. This is a project sponsored by Palo Alto Networks and led by Rick Howard. The goal is “identify a list of must-read books for all cybersecurity practitio… Continue reading Latest Book Inducted into Cybersecurity Canon
Periodically I read about efforts by China, or Russia, or North Korea, or other countries to replace American software with indigenous or semi-indigenous alternatives. I then reply via Twitter that I love the idea, with a short reason why. This post wi… Continue reading Five Reasons I Want China Running Its Own Software
Last month I retweeted an image labelled “The Map of Cybersecurity Domains (v1.0)”. I liked the way this graphic divided “security” into various specialties. At the time I did not do any research to identify the originator of the graphic.Last night bef… Continue reading Cybersecurity Domains Mind Map