My Writing

• Social Networking When Bots Chat With Social Network Participants
  Scammers use compromised social network accounts for malicious chats—currently with human operators, but increasingly automated bots. Creating intelligent chat bots for Facebook is straightforward...
• Social Networking When Bots Control Content on Social Networking Sites
  Bots on social networks build fake friendships to improve reputation, mimic human profiles to evade detection, and flood discussions with spam to drown out legitimate content. Social networking sites...
• Malware When Malware Distributes Links Through Social Networks
  Malware like Koobface spreads on social networks by posting links from compromised accounts—people click because they trust friends' shares. Telling users to stop clicking won't work. Better tools...
• Leadership The Worrisome State of the Cybersecurity Industry
  What's most telling about the security community's long list of complaints is how little it has changed over the years. Tools that don't fit our needs, vendors that overpromise, spending divorced...
• Malware Analysis Announcing REMnux Version 2: Linux Distro for Malware Analysis
• Risk Management Non-Financial "Currency" for Framing Security Discussions
  Frame security discussions in internal currency beyond dollars, such as reputation, service availability, and trade secrets. The CISO can also face SEC enforcement and criminal proceedings, which...