My Writing

I write about security leadership and technology, sharing strategies, practical frameworks, and field notes. My goal is to capture what I've learned and contribute to conversations in our community.

• Malware Analysis Designing a Malware Analysis Lab With REMnux
  Two VMs on a host-only network and one allowlisted path out let a sample run while an AI agent helps. The two decisions that matter most are where the agent runs and what it may reach.
• Malware Analysis AI-Assisted Malware Analysis Tips
  An AI agent can amplify a malware analyst's skills, but the analyst must direct it and verify its findings. These tips cover how to split the work, set up a contained lab, delegate tasks, and...
• Artificial Intelligence My Favorite Findings From the AI Security Decisions Report
  Over 300 security professionals told Sounil Yu and me how their organizations secure AI. We published what we learned as the AI Security Decisions Report, so you can compare your AI security...
• Fun Brooklyn History: The Mystery of Club 338
• Artificial Intelligence The Security Autonomy Matrix: Deciding AI Authority
  The Security Autonomy Matrix is a framework for deciding how much authority to grant your security AI agents, one kind of action at a time. You record those decisions in one table, one row per...
• Artificial Intelligence A Field Guide to the AI Security Market
  The market for products that secure AI is crowded and hard to read, with overlapping categories and products that each do many jobs. With the AI Defense Matrix, you can ask the right questions, tell...