http://communities.intel.com/community/openportit/it/blog IT@Intel Fri, 13 Nov 2009 19:07:11 GMT Clearspace 2.5.9 (http://jivesoftware.com/products/clearspace/) 2009-11-13T19:07:11Z http://communities.intel.com/community/openportit/it/blog/2009/11/13/taking-back-the-security-initiative Threat agents maintain the initiative and we respond to restore balance. The bad guys innovate, find exposures, and use technology which they can leverage to achieve their objectives.  They take the first step, set the tempo, and lead this wicked threat security roi value rosi information_security intel_it strategy optimal matthew_rosenquist matthew rosenquist it optimal_security model risk it@intel Fri, 13 Nov 2009 19:21:37 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/11/13/taking-back-the-security-initiative 2009-11-13T19:21:37Z 2 weeks, 1 day ago http://communities.intel.com/community/openportit/it/blog/comment/taking-back-the-security-initiative http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12842 http://communities.intel.com/community/openportit/it/blog/2009/10/20/are-billion-year-passwords-weak No.  Just the people who use them. Passwords of reasonable strength (8 characters or more consisting of upper/lower case and special keys) coupled with timely expiration, are secure.  Passphrases with comparable measures are equally secure.  The systems value information_security rosenquist it@intel password optimal_security model risk matthew intel it threat vulnerability security matthew_rosenquist Tue, 20 Oct 2009 22:45:20 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/10/20/are-billion-year-passwords-weak 2009-10-20T22:45:20Z 1 month, 1 week ago http://communities.intel.com/community/openportit/it/blog/comment/are-billion-year-passwords-weak http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12722 http://communities.intel.com/community/openportit/it/blog/2009/10/19/it-is-time-for-a-data-security-revolution It is Time for a Data Security Revolution! Information technology has lagged behind society’s skyrocketing need to manage and secure data.   Information is growing exponentially and our demands for control and oversight continue to develop rapidly.   rosenquist it matthew_rosenquist data information security value information_security optimal_security model risk matthew it@intel intel_it threat strategy Tue, 20 Oct 2009 04:51:08 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/10/19/it-is-time-for-a-data-security-revolution 2009-10-20T04:51:08Z 1 month, 1 week ago 1 http://communities.intel.com/community/openportit/it/blog/comment/it-is-time-for-a-data-security-revolution http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12707 http://communities.intel.com/community/openportit/it/blog/2009/09/17/fortune-cookie-security-advice--confusing-security-measures-and-metrics--sept-2009 Measures generate data and metrics organize data to generate information.  The difference between ‘data’ and ‘information’, the former is something you know, the latter is something you use.   Everyone wants information security to be easy.  concern analysis value optimal rosenquist threat security matthew_rosenquist information fear corporate_security metric measure model matthew risk Thu, 17 Sep 2009 17:07:03 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/09/17/fortune-cookie-security-advice--confusing-security-measures-and-metrics--sept-2009 2009-09-17T17:07:03Z 2 months, 1 week ago 1 http://communities.intel.com/community/openportit/it/blog/comment/fortune-cookie-security-advice--confusing-security-measures-and-metrics--sept-2009 http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12568 http://communities.intel.com/community/openportit/it/blog/2009/09/10/can-low-tech-it-solutions-be-secure Thinking creatively, a South African IT company decided to use a low technology solution to complete a data transfer when their ISP network could not handle the job.  Typically, quick out-of-the-box IT solutions are rarely secure.  Smart technologists model threat security value information_security optimal_security risk matthew_rosenquist matthew rosenquist Thu, 10 Sep 2009 18:13:07 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/09/10/can-low-tech-it-solutions-be-secure 2009-09-10T18:13:07Z 2 months, 2 weeks ago 1 http://communities.intel.com/community/openportit/it/blog/comment/can-low-tech-it-solutions-be-secure http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12535 http://communities.intel.com/community/openportit/it/blog/2009/08/10/practical-information-security-strategy-for-secure-communication--video Employees need the ability to communicate securely.  Deploying the right capabilities can empower employees to keep the organization’s information more secure.  Matthew Rosenquist discusses a strategy to establish secure communication channels.   model risk matthew_rosenquist matthew rosenquist security information_security optimal_security strategy information communication threat agent attack value channel Mon, 10 Aug 2009 22:26:28 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/08/10/practical-information-security-strategy-for-secure-communication--video 2009-08-10T22:26:28Z 3 months, 2 weeks ago http://communities.intel.com/community/openportit/it/blog/comment/practical-information-security-strategy-for-secure-communication--video http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12432 http://communities.intel.com/community/openportit/it/blog/2009/08/04/strategy-to-defeat-phishing-attacks--video Phishing is pervasive, evolving, and a serious threat to everyone.  Matthew Rosenquist discusses strategies to defeat phishing attacks.     Video 5:14 minutes rosenquist strategy security information phishing spear whaling threat agent attack value information_security optimal_security model risk matthew_rosenquist matthew Tue, 04 Aug 2009 16:58:55 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/08/04/strategy-to-defeat-phishing-attacks--video 2009-08-04T16:58:55Z 3 months, 3 weeks ago 1 http://communities.intel.com/community/openportit/it/blog/comment/strategy-to-defeat-phishing-attacks--video http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12414 http://communities.intel.com/community/openportit/it/blog/2009/07/31/fortune-cookie-security-advice--no-royal-road-to-security--july-2009 There is no Royal Road to understanding and achieving information security   Everyone wants information security to be easy.  Wouldn’t it be nice if it were simple enough to fit snugly inside a fortune cookie?  Well, although I don’t try to promote value concern matthew corporate_security analysis security information optimal model matthew_rosenquist rosenquist threat risk fear measure Fri, 31 Jul 2009 18:46:52 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/07/31/fortune-cookie-security-advice--no-royal-road-to-security--july-2009 2009-07-31T18:46:52Z 4 months, 6 hours ago http://communities.intel.com/community/openportit/it/blog/comment/fortune-cookie-security-advice--no-royal-road-to-security--july-2009 http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12405 http://communities.intel.com/community/openportit/it/blog/2009/07/31/the-greed-principle--video Greed drives behaviors of cyber attackers.  Matthew Rosenquist discusses the pain and benefits of the Greed Principle.         Video 3:29 minutes   Purpose of Security Programs information_security model security information greed threat agent attack value optimal_security risk matthew_rosenquist matthew rosenquist Fri, 31 Jul 2009 17:10:01 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/07/31/the-greed-principle--video 2009-07-31T17:10:01Z 4 months, 7 hours ago http://communities.intel.com/community/openportit/it/blog/comment/the-greed-principle--video http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12399 http://communities.intel.com/community/openportit/it/blog/2009/07/09/the-sad-story-of-information-security-risk-metrics Risk metrics are the heart and soul of information security indicators.  An increasing proliferation of tools and assessments has emerged, attempting to quantify states of information security.  Given the nature of what is trying to be measured, this is openportpromo rosi roi value information_security threat measure security optimal_security model risk matthew_rosenquist matthew rosenquist metric Thu, 09 Jul 2009 17:27:47 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/07/09/the-sad-story-of-information-security-risk-metrics 2009-07-09T17:27:47Z 4 months, 3 weeks ago 1 http://communities.intel.com/community/openportit/it/blog/comment/the-sad-story-of-information-security-risk-metrics http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12333 http://communities.intel.com/community/openportit/it/blog/2009/06/16/fortune-cookie-security-advice-strategic-competitive-secure--june-2009 Think strategic.  Act competitive.  Be secure.   Everyone wants information security to be easy.  Wouldn’t it be nice if it were simple enough to fit snugly inside a fortune cookie?  Well, although I don’t try to promote such foolish nonsense, I do security it@intel analysis secure matthew_rosenquist information_security openportpromo model threat optimal_security it value rosenquist strategy measure corporate_security intel_it risk Tue, 16 Jun 2009 21:12:49 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/06/16/fortune-cookie-security-advice-strategic-competitive-secure--june-2009 2009-06-16T21:12:49Z 5 months, 2 weeks ago http://communities.intel.com/community/openportit/it/blog/comment/fortune-cookie-security-advice-strategic-competitive-secure--june-2009 http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12277 http://communities.intel.com/community/openportit/it/blog/2009/05/26/fortune-cookie-security-advice--may-2009 Everyone wants information security to be easy.  Wouldn’t it be nice if it were simple enough to fit snugly inside a fortune cookie?  Well, although I don’t try to promote such foolish nonsense, I do on occasion pass on readily digestible nuggets to fear corporate_security information_security measure optimal_security matthew_rosenquist openportpromo risk model analysis threat it value concern it@intel rosenquist intel_it security Tue, 26 May 2009 18:00:19 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/05/26/fortune-cookie-security-advice--may-2009 2009-05-26T18:00:19Z 6 months, 6 days ago http://communities.intel.com/community/openportit/it/blog/comment/fortune-cookie-security-advice--may-2009 http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12198 http://communities.intel.com/community/openportit/it/blog/2009/05/12/traps-of-measuring-security-risks We naturally take comfort in being able to quantify the vagueness of challenges in our existence.  This past week, I was again reminded the cup of information security is filled partially with the complexities of human perception and ambiguity of it@intel vulnerability risk threat information_security model matthew_rosenquist security rosenquist optimal_security analysis measurement measure openportpromo it intel_it Tue, 12 May 2009 20:29:15 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/05/12/traps-of-measuring-security-risks 2009-05-12T20:29:15Z 6 months, 2 weeks ago http://communities.intel.com/community/openportit/it/blog/comment/traps-of-measuring-security-risks http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12155 http://communities.intel.com/community/openportit/it/blog/2009/05/12/fortune-cookie-security-advice--april-2009 Everyone wants information security to be easy.  Wouldn’t it be nice if it were simple enough to fit snugly inside a fortune cookie?  Well, although I don’t try to promote such foolish nonsense, I do on occasion pass on readily digestible nuggets to it@intel model intel_it information_security openportpromo it security rosenquist strategy corporate_security threat attack attacker matthew_rosenquist risk optimal_security Tue, 12 May 2009 17:59:35 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/05/12/fortune-cookie-security-advice--april-2009 2009-05-12T17:59:35Z 6 months, 2 weeks ago http://communities.intel.com/community/openportit/it/blog/comment/fortune-cookie-security-advice--april-2009 http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12154 http://communities.intel.com/community/openportit/it/blog/2009/03/18/fortune-cookie-security-advice--march-2009 Everyone wants information security to be easy.  Wouldn’t it be nice if it were simple enough to fit snugly inside a fortune cookie?  Well, although I don’t try to promote such foolish nonsense, I do on occasion pass on readily digestible nuggets to matthew_rosenquist security rosenquist strategy threat value corporate_security information_security optimal_security model risk Wed, 18 Mar 2009 17:15:09 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/03/18/fortune-cookie-security-advice--march-2009 2009-03-18T17:15:09Z 8 months, 2 weeks ago http://communities.intel.com/community/openportit/it/blog/comment/fortune-cookie-security-advice--march-2009 http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=11970