Quote

As economic life relies more and more on the Internet, the potential for small bands of hackers to launch devastating attacks on the world economy is growing.

Most people assume that once security software is installed, they're protected. This isn't the case. It's critical that companies be proactive in thinking about security on a long-term basis.

People want security in this insecure world.

Corporations understand the value of security because the leakage of their competitive information could be the end of the corporation.

Security is always going to be a cat and mouse game because there'll be people out there that are hunting for the zero day award, you have people that don't have configuration management, don't have vulnerability management, don't have patch management.

Security is an attempt to try to make the universe static so that we feel safe.

What happens with smaller businesses is that they give in to the misconception that their site is secure because the system administrator deployed standard security products - firewalls, intrusion detection systems, or stronger authentication devices such as time-based tokens or biometric smart cards. But those things can be exploited.

Companies spend millions of dollars on firewalls, encryption, and secure access devices and it's money wasted because none of these measures address the weakest link in the security chain: the people who use, administer, operate and account for computer systems that contain protected information.

We have an illusion of security, we don't have security.

We all need to decide what makes it safe and secure on the Internet. It can't be anybody else's decision. We have to have a voice.