My Writing

• Assessments Perception of Value in Security Consulting Projects
  Clients can't evaluate specialized security work directly, so they estimate value by assessing effort—usually time. A skilled locksmith opening locks in seconds gets fewer tips than when...
• Communication 10 Communication Tips for Security and IT Professionals
  Explaining security and IT work is often harder than the work itself. Ten habits will sharpen how you explain it to specialists, executives, and everyone in between.
• Social Engineering Cybersecurity Deception Lessons from World War II
  WWII deception succeeded through ambiguity that paralyzed enemy decisions and false attractiveness that drew attention to the wrong plan. Modern honeypots, honeytokens, and decoy services rely on the...
• Training Make Security Policies Harder to Read to Improve Retention?
• Social Networking Predicting 2011 Information Security Trends
• Social Networking Antivirus Vendors Consider Facebook Activity Protection
  Antivirus vendors are experimenting with Facebook apps (Norton Safe Web, BitDefender Safego) that review links shared on users' walls for malware. These run on vendor infrastructure using Facebook's...