tutorial about web security computer networking

Tony Sager from the NSA is one of my Three Wise Men. (Dan Geer and Ross Anderson are the other two.) Eric Parizo from SearchSecurity.com i...

Last month I attended my first Workshop on the Economics of Information Security (WEIS 2010) at Harvard. It was cool to visit and it remin...

Thanks to @borroff I read a fascinating article titled Cybersecurity and National Policy by Dan Geer. The title of my blog post is an exc...

Every so often I receive questions from blog readers. The latest centered on the following question: What level and extent should a securit...

I took a few notes at the SANS Incident Detection Summit keynote by Tony Sager last week. I thought you might like to see what I recorded....

I had the distinct privilege to attend a keynote by retired Air Force General Michael Hayden , most recently CIA director and previously NSA...

I got a chance to read a new paper by one of my three wise men ( Ross Anderson ) and his colleague (Tyler Moore): Information Security Econo...

The Face-Off article in the September 2007 Information Security Magazine contains a great closing thought by Marcus Ranum: Will the future...

Because I was teaching at USENIX Security this month I didn't get to attend Marcus Ranum's tutorial They Really Are Out to Get You:...

I just listened to my third of the Three Wise Men, Ross Anderson , courtesy of Gary McGraw's Silver Bullet Podcast . This is another mus...

I just blogged about a new podcast by the first of my Three Wise Men, namely Marcus Ranum . My second of the Three Wise Men for today is Da...

Dan Geer published an interesting article in the May/June 2006 issue of IEEE Privacy and Security . He questions the utility of converging...

Donn Parker published an excellent article in the latest issue of The ISSA Journal titled Making the Case for Replacing Risk-Based Security...