-
-
-
BlogInfoSec.com Sponsors
-
-
BlogInfoSec.com Partners
-
Disclaimer: The opinions of the columnists are their own and not necessarily those of their employer.
Qualified Writer?
Submit a Guest Article through the SUBMISSIONS link above!
Full-Time Inquiries Contact Us: authors@bloginfosec.com
Newsletter
-
Authors
Categories
Translations
English • Afrikaans • العربية • Беларуская • Български • Català • Česky • Cymraeg • Dansk • Deutsch • Eesti • Ελληνικά • Español • فارسی • Français • Gaeilge • Galego • हिन्दी • Hrvatski • Bahasa Indonesia • Íslenska • Italiano • עברית • Latviešu • Lietuvių • 한국어 • Magyar • Македонски • മലയാളം • Malti • Nederlands • 日本語 • Norsk (Bokmål) • Polski • Português • Română • Русский • Slovenčina • Slovenščina • Shqip • Srpski • Suomi • Svenska • Kiswahili • ไทย • Tagalog • Türkçe • Українська • Tiếng Việt • ייִדיש. • 中文 / 漢語Recent Comments
- alex on Why the “Risk = Threats x Vulnerabilities x Impact” Formula is Mathematical Nonsense
- Remington Winters on Why the “Risk = Threats x Vulnerabilities x Impact” Formula is Mathematical Nonsense
- Robb Reck on Why the “Risk = Threats x Vulnerabilities x Impact” Formula is Mathematical Nonsense
- sriram vasudevan on Why the “Risk = Threats x Vulnerabilities x Impact” Formula is Mathematical Nonsense
- Why Risk = Threat and Vulnerability and Impact « Behavioral Security on Why the “Risk = Threats x Vulnerabilities x Impact” Formula is Mathematical Nonsense
- Adam Smith agility ALE algorithms application security asia assessment Audit authentication authentication tokens Availability awareness Awareness / Education awareness instruction awareness training biometrics black swans bloginfosec Annoucements Books on InfoSec botnets BP breaches breach incidents British Petroleum BSIMM Budgeting for Security business business continunity Center for Strategic and International Studies china CIA triad CISO CISO savvy CISO skills cloud computing CNCI COBIT Coding Securely / SDLC compliance Comprehensive National Cybersecurity Initiative Conferences / Events / Meetups Contingency Planning contingency plans counterfeit counterfeit equipment CSIS cyber attack cyber war cyber warfare data breach data breaches data breach notification laws data classification data handling. data destruction data leakage data life cycle data loss prevention data ownership decision theory defense in depth DHS digital signature disaster planning disaster recovery DLP education electromagnetic pulse electromagnetic pulse attack EMP Encryption end-point security equipment expected utility expected value Exploit Code / Malware exploits facebook fake FBI featured FFIEC Forensics / Incidents FS-ISAC FSSCC FUD FUD Theater functional security testing Gary Hinson GLBA Google governance government Gramm-Leach-Bliley Gramm-Leach-Bliley Act Gulf oil disaster hack hackers hacking hash HIPAA Homeland Security honeynet honeypot Howard Schmidt identity management identity theft IDM incident inductive logic Industry Commentary information classification Information security information security as business enabler information security governance information security management information security metrics insiders insider threat interval scale Interviews ISACA ISSA Jobs in Information Security Johnny Long KPMG Larry Summers law leadership Legal & Regulatory Issues lifecycle malicious insider malware Melissa Hathaway metrics microsoft NASA Nassim Nicholas Taleb national security National Security Council nation states negative testing network News Commentary non-public personal information No Tech Hacking objective outsourcing OWASP passwords Patching PCI Penetration Testing perimeter personal information personally identifiable information Phishing Policies and Procedures President's Identity Theft Task Force Presidential Decision Direction 63 Privacy Privacy Rights Clearinghouse private sector probability probability calculus process qualitative quantitative Red Flags Red Flags Rule reputational risk research and development Reverse Engineering Richard A. Clarke Richard Clarke risk Risk Analysis risk assessment risk management risk models ROI ROSI ROSI Security RSA RSA Conference sarbanes-oxley SB 1386 SDLC secure development Security security awareness Security Breaches security economics Security Metrics self-awareness Siobhan Gorman Social Engineering soft skills software assurance Solutions / Workarounds south korea SOX SPAM SQL Injection Attack subjective successful behaviors The Black Swan Tools Toyota training U.S. Cyber Consequences Unit Uncategorized uncertainty virtualisation virtualization Virtual Trust Viruses / Worms vulnerability vulnerability assessment Vulnerability Commentary Vulnerability Disclosure Wall Street Journal web applications William R. Forstchen Wireless Wireless Client Wireless Discussion Wireless Security Wireless Vulnerability Discussion Y2K
© 2010 BlogInfoSec.com. All rights reserved.
|
Privacy
|
Terms of Service
“Room for Optimism?” Redux: Two small cases
A few days ago I blogged that “one wonders if most InfoSec professionals’ perspectives are negative in nature.”
Today I read: Why do hotels suck?
And this quote from SearchSecurity.com:
The “you’d think” is fairly condescending because it assumes that people should know otherwise but somehow they just don’t get it.
Just food for thought.
Popularity: 3%