tutorial about web security computer networking

It's 2007 and some people still do not know the difference between a threat and a vulnerability. I know these are just the sorts of pos...

I'd hoped to not have to say anything else on FAIR, but I've decided to ask one final question. If I can't get a straight answe...

I've subscribed to the Economist for over ten years, and it's been worth every penny. Today I noticed the following in an article ...

I intended to stay quiet on risk models for a while, but I read the following Economist articles and wanted to note them here for future re...

My post Thoughts on FAIR has attracted some attention, but as often the case some readers choose to obscure my point by overlaying their ow...

You knew I had risk on my mind given my recent post Economist on the Peril of Models . The fact is I just flew to Chicago to teach my last ...

Gunnar Peterson pointed me to a great blog post he wrote called Protect the Transaction . He quotes Dave Kilcullen's post Two Schools o...

The image at left is from the first issue of an Intel marketing magazine called Premier IT . I like it because it shows many of the terms I...

I write about risk, threat, and other security definitions fairly regularly. Lo and behold I just read a post by someone else who shares my...

Donn Parker published an excellent article in the latest issue of The ISSA Journal titled Making the Case for Replacing Risk-Based Security...

If you've been following the last few days of posts, I've been thinking about security from a more general level. I've been won...

This evening I watched a story on BBC News about the problem of bird flu . Here is the story broken down in proper risk assessment language...

I found the article Corporates focus on basics for IT security defences by John Leyden to be interesting. He reports on a survey presented...