posted by Scott Crawford   | February 14, 2012 | 0 Comments

Happy Valentine’s Day, etc.  But enough chitchat. Herewith a short compendium of some of the articles and blogs about data-driven security I’ve been mentioning or have otherwise referenced recently – thought it would be worthwhile to pull these together into a single post. I’ll add to this list in future updates. We’ll begin with the...

Read More »





Baseball_batter

Happy (belated) New Year! (Well, maybe not so happy if you buy shoes online or are having second thoughts about source code escrow.) Like many, I’ve been contemplating my expectations for 2012. But rather than just play armchair quarterback (a popular pastime among NFL fans here in Denver of late), I thought it would be more useful...

Read More »





posted by Scott Crawford   | October 20, 2011 | 0 Comments

buried-help-flag-iStock_000009400696XSmall-150x150

Last week, I had the opportunity to spend a few days with a truly interesting and diverse group of practitioners, who I think are on to the future of information security. It will come as no surprise to anyone who follows this blog that I believe that future is centered on the ability to do...

Read More »





data-explosion-iStock_000013253555XSmall

With the acquisitions of Q1Labs and NitroSecurity last week, the industry’s attention has been drawn anew to the value of security information and event management (SIEM). In the enterprise, SIEM is often the focus of security operations, collecting data from a variety of point products, management and monitoring systems. But as I wrote on Tuesday,...

Read More »





posted by Scott Crawford   | April 4, 2011 | 0 Comments

Catching up after a long weekend spent (mostly) offline, and digesting RSA’s Friday disclosure regarding its recent breach. In the plus column for RSA: At least they made an effort to communicate some detail, albeit late, and at no small risk to their reputation no matter how their statement would be received. They were reasonably forthcoming...

Read More »