My Writing

• Risk Management Risk Management: Objectivist and Subjectivist Approaches
  Objectivists rely purely on historical data to predict risk; subjectivists complement data with judgment about context. A coin flipped by a magician might warrant different probability assessments...
• Web Security Time to Let Go of Java in the Web Browser: How to Disable It
  Java exploits have become the top moneymaker for exploit kit authors, yet few people regularly use Java in browsers. The likelihood of being targeted overpowers the benefits. Disable Java in browsers...
• Malware Analysis Free Toolkits and Frameworks for Malware Analysis
  Open-source sandbox platforms, analysis environments, and AI-assisted tools let you build your own malware analysis capability without commercial licenses. Options include CAPEv2, DRAKVUF Sandbox,...
• Malware Specialized Honeypots for SSH, Web and Malware Attacks
  Specialized honeypots match a single attacker tactic, turning ambiguous activity into precise telemetry whether they wait for attackers to arrive or actively visit suspicious sites. The T-Pot...
• Social Networking Exploring Facebook's New Social CAPTCHA Authentication
  Facebook's "social CAPTCHA" authentication asks users to identify photos of friends when login anomalies are detected—distinguishing legitimate users from imposters. This increases social data's...
• Cloud Getting Started with Cloud Security and Risks - Favorite Frameworks
  Key cloud security frameworks: NIST defines cloud computing terminology (SaaS/PaaS/IaaS, deployment models), Cloud Security Alliance provides comprehensive security guidance across governance and...