Comments for Network Security Blog

Comment on How do you keep your data ‘safe’ despite a compromise? by R. Scott McCoy

R. Scott McCoy — Sun, 20 May 2012 16:06:46 +0000

I think your estimate of how many companies know they are compromised is extremely high. I still meet far too many people that are in denial and lack the tools and people necessary to find out for sure.

The top ten Defense companies are doing the best job of protecting data in my opinion, but even they lose data occasionally. Without some revolutionary, game changing gizmo, the only two viable options I see are either to create a closed environment like a classified network, or to ramp up the capabilities of companies to the level of those big ten Defense companies. Both are expensive to create and maintain.

Losing health and privacy data is serious, but when companies lose the Intellectual Property that is really the only reason they are in business, those companies risk going out of business. A company that must work R&D into its pricing can’t compete with a company that stole the data and built an identical product. When you are looking at losses on that scale, it is easier to justify not just the expense, but the inconvenience that strong security measures require.

Comment on Masking vs. Truncating by Steph

Steph — Mon, 07 May 2012 15:23:13 +0000

Thanks! This was very helpful and just what I was looking for after reading section 3.4.

Comment on Network Security Podcast, Episode 272 by Daniel

Daniel — Sat, 05 May 2012 10:19:53 +0000

viewed your episode and i agree with melissa its worth watching.

Comment on This is why CISPA scares me by Hary

Hary — Thu, 03 May 2012 21:16:26 +0000

Great! and the graphic images are awesome..

Comment on This is why CISPA scares me by Paul Masson

Paul Masson — Wed, 02 May 2012 18:18:14 +0000

Martin,
Great post. I especially like the graphics. If you’re like me, you will want to sign the petition:
http://www.stopcispa.com/

Comment on This is why CISPA scares me by Network Security Blog

Network Security Blog — Tue, 17 Apr 2012 23:36:47 +0000

[...] CISPA is getting better, but still has a long way to go [...]

Comment on Network Security Podcast, Episode 271 by Verizon’s latest breach delivery | The State of Security

Verizon’s latest breach delivery | The State of Security — Tue, 17 Apr 2012 15:01:48 +0000

[...] was catching up on my backlog of podcasts last week, and listened to Episode 271 of the Network Security Podcast (part of my balanced diet of security fiber). If you’re not familiar with this podcast, it [...]

Comment on BaySec tomorrow night by Doron

Doron — Thu, 12 Apr 2012 23:38:55 +0000

Martin,

When and where is the next time you meet?

Thanks,
Doron

Comment on Global Payment Systems delisted by Visa by Maureen Robinson

Maureen Robinson — Thu, 12 Apr 2012 12:30:17 +0000

I believe you have done a good job in explaining on simple terms the relationship between the bank, merchant, credit card company, etc. Visa was subjected to a major security breach, and as you’ve stated in the article, this very well could be only the tip of the iceberg.
I believe that in order for the industry to develop and to increase its overall security, all standard regulations such as PCI DSS, HIPAA, NIST and others should be clearly defined and followed by all companies. Please check out our point of view on the importance of PCI and other security regulations: http://blog.securityinnovation.com/blog/2010/12/the-time-for-application-security-certification-is-now-part-ii.html

Comment on Network Security Podcast, Episode 272 by Melissa

Melissa — Mon, 09 Apr 2012 12:16:20 +0000

Hi Martin,

I did view the entire episode and trust me found it worth the watch.