How to Cut Through Vendor Claims & Marketing Hype When Evaluating New Security Tools

I have a new post on the Threat Stack blog.

Check out my other recent Threat Stack posts!

How to Identify Threats Within Your Docker Containers

I have a new post on the Threat Stack blog.

Check out my other recent Threat Stack posts!

The Difference Between Security Trick Plays and Security Fundamentals

I have a new post on the Threat Stack blog.

Check out my other recent Threat Stack posts!

SLDC, SOC 2, and Other Four Letter Words

I have a new post on the Threat Stack blog based on my presentation last week at SOURCE Boston!

Talk description:

Except for any authors of trojans that may have stumbled in accidentally, we all want to write secure applications. In spite of our sincere desires, vulnerable code gets shipped. Why? What do we do to fix it? What can we do to prevent it from happening? The answers exist in the realm of the software development life cycle, or SDLC. Various compliance vehicles (such as SOC2) exist to help us formulate an effective SDLC, but any security expert knows that checking a box does not typically yield the desired results. This talk describes the SDLC used by the agent team at Threat Stack, while also bringing in outside experiences to supplement. It also goes over pitfalls observed and lessons learned. You might not use the same tools or produce the same product, but the talk focuses on principles to make the resulting product more secure.

Check out my other recent Threat Stack posts!

Eyes on the Ground: Why You Need Security Agents

I have a new post on the Threat Stack blog based on my presentation last week at SOURCE Boston!

Talk description from SOURCE agenda:

Whether you build, buy, borrow, or steal it, you need a security agent on your endpoints. We can already hear your cries of "agent fatigue" and we sympathize. Any agent, no matter how lightweight, has costs associated with running it. Minimize those costs and get an agent, because you need the information that only an agent can harvest from the endpoint. We talk about various types of security agents, including their respective strengths and weaknesses. We explore how agents can interact and interfere with each other, and provide some tips for evaluating agents. We cover open-source, custom-built, and vendor perspectives, from cloud to IoT. We need information to do our jobs, and we need agents on our digital assets to provide that information. 

I exported the keynote slides to slideshare.

Check out my other recent Threat Stack posts!

C++ in the Linux kernel

I have a new post on the Threat Stack blog!

Check out my other recent Threat Stack posts!

How to Educate Yourself About Cloud Security

I have a new post on the Threat Stack blog!

Check out my other recent Threat Stack posts!

Changing Metaphors to Make Sense of Security in the Cloud

I have a new post on the Threat Stack blog!

Check out my other recent Threat Stack posts!

Boston SOURCE Conference 2016: I Got the T-Shirt and a Whole Lot More

I have a new post on the Threat Stack blog!

Check out my other recent Threat Stack posts!

A Glimpse into Boston Secure World 2016

I have a new post on the Threat Stack blog!

Check out my other recent Threat Stack posts!

My Bit9 posts are dead, long live my Bit9 posts!

Bit9 recently renamed itself to Carbon Black. It looks like they won't be carrying over the Bit9 blog posts to the Carbon Black blog. Makes sense, but it's still kind of a bummer. Good thing we have the WaybackMachine! Nothing dies on the internet, folks:

• Data Mining: 7 Reasons How New Technology Could Impact Privacy - May 18, 2012
• The Gamble of Failure-Oblivious Computing - May 29, 2012 
• Malware Fear: Are Security Companies Manipulating or Highlighting the Truth? - June 11, 2012 
• Beyond the Maginot Line: 8 Ways to Improve Your Personal Security Posture - June 28, 2012
• The Darwin Awards of IT Security: 6 Things to Avoid - July 17, 2012
• Computer Licensing: Should IT Departments Act More Like the RMV? - August 20, 2012
• 3 Lessons from a Breach, a War Game, and a Password Corpus  - August 29, 2012
• Preaching to the Choir: The Problem with Cybersecurity Education - January 11, 2013 
• 4 Realities of Cyber Security - January 29, 2013 
• How to Handle UPnP Vulnerabilities - February 1, 2013
• The Realities of Cyberwar: Fear, Uncertainty and Doubt - April 2, 2013
• Convenience vs. Security: Avoiding Trade-offs That Hurt Your Business - April 25, 2013
• Threat Intelligence: Using The Machine for Cybersecurity or Cyberattacks - May 29, 2013 
• Thinking About Security Daemons - June 14, 2013
• Managing Security Tradeoffs between Private and Public Information - July 11, 2013 
• Legal and Political Perspectives of Cyber Security - October 21, 2013

You can even go and see my old blog profile at Bit9.

Whitelisting is Dead, Long Live Whitelisting!

I have a new post on the Threat Stack blog!

Check out my other recent Threat Stack posts!

Highlights From Facebook's Security@Scale (@SecatScale)

2/4/2016 - Oops! I forgot about this one! Adding it later and then back-dating it. Shhhh!

I have a new post on the Threat Stack blog!

Check out my other recent Threat Stack posts!

Identifying Insider Threats Within Your Docker Containers

I have a new post on the Threat Stack blog!

Applying The Principles of The Quantified Self to ​Cloud Security

I have a new post on the Threat Stack blog!

Legal and Political Perspectives of Cyber Security

New Bit9 blog post: Legal and Political Perspectives of Cyber Security

No comment

The comments on my blog seem to not show up on postings after June 12th. Not only that, but I cannot even read them. I have a thread going over on the help forums to hopefully figure it out, but until it gets resolved I won't see any comments. I apologize for the inconvenience.

Managing Security Tradeoffs between Private and Public Information

New Bit9 blog post: Managing Security Tradeoffs between Private and Public Information.

It talks about this graph I've been thinking about:

You can read all my Bit9 blog posts here.

Thinking About Security Daemons

Posted on the Bit9 blog: Thinking About Security Daemons

See all my Bit9 blog posts here.

Threat Intelligence: Using The Machine for Cybersecurity or Cyberattacks

New post on Bit9 blog: Threat Intelligence: Using The Machine for Cybersecurity or Cyberattacks