the State of Security

RSA 2010

If you want to succeed at security, you need to look at the winners

by David Spark

David Spark here reporting for Tripwire at the 2010 RSA Conference in San Francisco. One of the repeated security stories you hear time after time are cases of failing. Usually it’s a story of a data compromise, and the more egregious it is, the better the story is. There’s no doubt that we can learn [...]

Read More

RSA 2010: Why do organizations respond so poorly to audits?

by David Spark

David Spark here reporting for Tripwire at the 2010 RSA Conference in San Francisco. Jennifer Bayuk is an independent consultant and the director of cybersecurity programs at the Stevens Institute of Technology. She cowrote a paper with Tripwire’s Founder and CTO, Gene Kim, entitled, “Avoiding Audit Fatigue.” I asked her why do audits break down, [...]

Read More

RSA 2010: Chris Hoff on the state of data in a virtualized environment

by David Spark

David Spark here reporting for Tripwire at the 2010 RSA Conference in San Francisco. Mr. Cloud, aka @beaker on Twitter, and one hell of a smart and nice guy, Chris Hoff, Director of Cloud and Virtualization Solutions for Cisco Systems, chatted with me about the state of data in a virtualization space. When I asked [...]

Read More

RSA 2010: Where is your software most vulnerable?

by David Spark

David Spark here reporting for Tripwire at the 2010 RSA Conference in San Francisco. After their presentation “Correlating static and dynamic analysis results for more secure software” (read my summary) I spoke with Jacob West, Director of Security Research at Fortify Software, and Jeremiah Grossman, CTO and Founder of WhiteHat Security. I asked them what [...]

Read More

RSA 2010: Correlating static and dynamic analysis results for more secure software

by David Spark

David Spark here reporting for Tripwire at the 2010 RSA Conference in San Francisco. Jeremiah Grossman, CTO and Founder of WhiteHat Security and Jacob West, Director of Security Research at Fortify both spoke to the process of dynamic and static analysis of your applications for building security into your software (Watch my video interview with [...]

Read More

RSA 2010: Highlights of the RSA Conference on The Rob Black Show

by David Spark

David Spark here reporting for Tripwire at the 2010 RSA Conference in San Francisco. Yesterday I made an appearance on The Rob Black Show on KNEW 910 in San Francisco. Black’s show is mostly about finance, offering financial advice, but I pop on every now and then giving tips on technology. For a quick overview [...]

Read More