Designing software that is secure is a difficult prospect at the best of times. Defenders need to know what(assets) they need to protect and...

When one thinks of securing information, practitioners will recite the standard CIA mantra. We need to protect information from confidential...

Recently a customer asked me where they should focus their security efforts, should they focus on vulnerabilities or threats? I responded by...