My Writing

• Networking Web Application Firewalls (WAFs) Will Be Ubiquitous
  WAFs are following the adoption trajectory of traditional network firewalls—both mitigate risk when securing individual components is impractical. Network firewalls protected weakly-configured...
• Communication How to Design Security Warning Messages to Protect Users
  Microsoft labels a security prompt 'Enable Content,' but most people don't read 'content' as 'code that can run.' Design the safe choice to be obvious, keep the warning short, and skip jargon people...
• Leadership How to Achieve Work-Life Balance in Information Security?
• Communication The Need to Deal with Internal Politics for Security Professionals
  Nearly half of security professionals report internal and political issues consume most of their time. Rather than viewing this as red tape preventing real work, accept that navigating organizational...
• Authentication Better Internal Vulnerability Scanning With Authentication
  Authenticated vulnerability scans provide far more comprehensive results than anonymous scans by allowing the tool to examine installed applications, patches, and configurations. Create dedicated...
• Malware Understanding Computer Attack and Defense Techniques
  Modern attacks combine social engineering to bypass technical defenses, client-side exploits targeting browsers and add-ons, web application vulnerabilities like SQL injection, and persistent...