My Writing

I write about security leadership and technology, sharing strategies, practical frameworks, and field notes. My goal is to capture what I've learned and contribute to conversations in our community.

• Malware Analysis AI-Assisted Malware Analysis Tips
  An AI agent can amplify a malware analyst's skills, but the analyst must direct it and verify its findings. These tips cover how to split the work, set up a contained lab, delegate tasks, and...
• Artificial Intelligence My Favorite Findings From the AI Security Decisions Report
  Over 300 security professionals told Sounil Yu and me how their organizations secure AI. We published what we learned as the AI Security Decisions Report, so you can compare your AI security...
• Fun Brooklyn History: The Mystery of Club 338
• Artificial Intelligence The Security Autonomy Matrix: Deciding AI Authority
  The Security Autonomy Matrix is a framework for deciding how much authority to grant your security AI agents, one kind of action at a time. You record those decisions in one table, one row per...
• Artificial Intelligence Five Questions to Answer Before Buying an AI Security Product
  In the young security-for-AI market, what a product protects and how it ships can differ from what its label promises. With five questions drawn from the AI Defense Matrix Catalog work, you'll know...
• Artificial Intelligence A Field Guide to the AI Security Market
  The market for products that secure AI is crowded and hard to read, with overlapping categories and products that each do many jobs. With the AI Defense Matrix, you can ask the right questions, tell...