Black Hat: Articulating the Value of Security
By Steven Fox, Founder of SecureLexicon
How do we market security? The cyber-bullies among us might still use Fear, Uncertainty, and Doubt. While this may produce short term acquiescence, that approach ultimately alienates us from the decision makers. Ultimately, security professionals must identify what is valuable to the business and then associate the need for security with those assets
Black Hat: Risk and Application Security
By Steven Fox, Founder of SecureLexicon
The majority of IT security spending is focused on perimeter security. These measures are reactive in nature. “With the advent of Web Services and SOA, the attack surface is more exposed and is getting more complex. The more complex a system is, the easier it is to compromise. Security should be considered early in the software development process.
Sun Tzu: Analysis and Strategic Positioning
By Fred Leland, Founder of LESC
Sun Tzu’s theories are for the tactically minded professional wanting to secure every possible advantage - for the professional who wants to understand the mental, moral, and physical realms of conflict. WHY? Because that’s how we win on the street.
Infosec As a Form of Asymmetric Warfare
By Steven Fox, Founder of SecureLexicon
There are an amazing number of parallels between The Art of War and the information security business. In its very basic form – knowing your enemy – knowing how cyber vandals, miscreants, criminals, and even nation-state actors use cyber attack and cyber exploitation for their various objectives.
Sun Tzu and The Art of CIO Success
By Steven Fox, Founder of SecureLexicon
The CIO is a “General”. Generals are not concerned with how the weapons function or how the rank-and-file are performing. This is the job of the lieutenants. The General focuses on the strategic application of resources on the battlefield.
