Black Hat: Risk and Application Security

August 17, 2009 by ADMIN · Leave a Comment

By Steven Fox, Founder of SecureLexicon

The majority of IT security spending is focused on perimeter security. These measures are reactive in nature. “With the advent of Web Services and SOA, the attack surface is more exposed and is getting more complex. The more complex a system is, the easier it is to compromise. Security should be considered early in the software development process.

Infosec As a Form of Asymmetric Warfare

July 11, 2009 by ADMIN · Leave a Comment

By Steven Fox, Founder of SecureLexicon

There are an amazing number of parallels between The Art of War and the information security business. In its very basic form – knowing your enemy – knowing how cyber vandals, miscreants, criminals, and even nation-state actors use cyber attack and cyber exploitation for their various objectives.

Sun Tzu and The Art of CIO Success

June 28, 2009 by ADMIN · Leave a Comment

By Steven Fox, Founder of SecureLexicon

The CIO is a “General”. Generals are not concerned with how the weapons function or how the rank-and-file are performing. This is the job of the lieutenants. The General focuses on the strategic application of resources on the battlefield.