Mar 6The Missing Piece of the National Cybersecurity StrategyA good strategy has three major components: a description of the goals you are trying to achieve, an explanation of how you are going to achieve those goals, and what things look like when your strategy is working, or a definition of “success.” As fine a piece of work as…Cybersecurity3 min readCybersecurity3 min read
Feb 5AI & INFOSEC: The Good, The Bad, and The Ugly (maybe)If you’ve never played around with ChatGPT, go ahead a fiddle around a bit and then come back. I’ll wait. Cool right?! People have used it to write and analyze code and dabble with security issues. But as powerful as something like ChatGPT is, its impact on security is probably…AI3 min readAI3 min read
Oct 6, 2022Change Up to Level UpI’ve made my thoughts on the value of cybersecurity awareness month pretty clear. Cybersecurity doesn’t actually improve come 1 November. …Awareness2 min readAwareness2 min read
Jul 22, 2022If You Want Better Cyber Policy, Put More Nerds in ChargeThe decades-long effort to develop solutions to cyber insecurity has been led by the usual suspects drawn from the policy and legal community. That’s not the only reason why cyberspace is still a global ungoverned area, but it’s a big one. …3 min read3 min read
Apr 28, 2022Dear Air Force: Aim HigherI was in the Army, so if you think that’s disqualifier, you can hit your browser’s back button and move on. This week the Air Force introduced their “newest team member” the Department of the Air Force CISO’s cybersecurity awareness mascot. “He is mighty, strong & here to fight our…1 min read1 min read
Apr 18, 2022Cybersecurity 2030Discussions about cybersecurity overwhelmingly focus on the recent, which are our responses to the design and engineering decisions of the past. We are right to deal with what is in front of us, but that myopia ensures that we exercise little effort towards crafting our future. We want things to…Computer Security12 min readComputer Security12 min read
Mar 3, 2022Goodbye to All ThatIt was the cyberwar we were promised; it was the cyberwar nobody expected… The conflict in Ukraine has validated a number of assumptions cyberspace strategy and intelligence thinkers have been promulgating for over 20 years. The use of cyber attacks in conjunction with the traditional components of armed conflict, for…Cyber Conflict3 min readCyber Conflict3 min read
Feb 14, 2022The Importance of ContextLast night during the Super Bowl, cryptocurrency company Coinbase ran an ad that featured a QR code bouncing around the screen. That’s it. No actors, no voice over, just some retro 8-bit Pong-like motion. …3 min read3 min read
Nov 11, 2021Speed and ScaleNews about ransomware gang takedowns and ransom recoveries make for great headlines, and the way some people talk you’d think we had this ransomware thing licked. …Computer Security3 min readComputer Security3 min read
Nov 1, 2021End Cybersecurity Awareness MonthManagement guru Peter Drucker said, “what gets measured gets managed.” Which helps to explain why October — Cybersecurity Awareness Month — is such a bad idea. For the 31 days of October, everyone in the world who is not involved in cybersecurity is going to be rendered deaf by the…2 min read2 min read
