tutorial about web security computer networking

I got a chance to listen to Adam Shostack 's talk at ShmooCon. When I heard him slaughter my name my ears perked up. (It's "b...

I've written many posts on insider threats, like How Many Spies and Of Course Insiders Cause Fewer Security Incidents . Recently a for...

This is a follow-up to Incorrect Insider Threat Perceptions . I think security managers are worrying too much about insider threats compare...

Search my blog for "insider threat" and you'll find plenty of previous posts. I wanted to include this post in my earlier hol...

In June and July this year I devoted several posts to covering the Duronio intrusion where my friend Keith Jones served as prosecution expe...

No sooner did I write about a CEO gone bad do I read this: Ex-IT Chief Busted for Hacking : Stevan Hoffacker, formerly director of IT and V...

Just the other day I read the following in Cliff Berg's book High-Assurance Design : Roles should be narrowly defined so that a single r...

I will participate in the DE Communications Inside Job Webinar at 1100 ET on Thursday 9 November 2006. I plan to discuss why traditional e...

I received a copy of a study announced by ArcSight and conducted by the Ponemon Institute . I mention this for two reasons. One, it highl...

Earlier this week I said Of Course Insiders Cause Fewer Security Incidents . I'm taking heat over at Matasano , but I've got some f...