From a young age, kids start telling white lies to get out of trouble from their parents. These aren't usually malicious lies, it's not like they go around at night killing the neighbourhood cats. It's more small things like standing in front of you with their hands covered in paint and claiming they don't know … Continue reading Lies, Lies and Some more Lies →

What's the best security advice you've ever received? That was the question I was asking unsuspecting delegates at Infosec Europe 2012, on behalf on Tripwire. As you can see, there were a fair amount of answers around passwords. Which was... ummm... interesting. See more of my coverage at Infosec 2012, with some great interviews with … Continue reading What’s The Best Security Advice You’ve Received? →

Information Security folk aren't much different than people in other careers. When we get together and talk amongst ourselves, it can sound like a foreign language. But do we remember to revert back to normal language when we speak to non-security people?

I spent a day at Infosec Europe courtesy of my lurvely sponsors Tripwire and got the chance to speak to people who otherwise wouldn't have probably given me the time of day. So I guess the one thing you can take away from it all is that if you want to speak to CISO's and … Continue reading B-Sides London and Infosec Europe 2012 →

Security awareness training can be a bit dull and boring, so we commonly try to come up with ways on how to make it a more engaging topic for our audience. But do we end up patronising them with gimmicks and child-like messages?

System hardening is a term used frequently. But what does it exactly mean and are you doing it right? In simple terms, any system or device out of the box comes with all its bells and whistles belling and whistling. Which is great if you're going to use it to backup your holiday pictures at … Continue reading System Hardening →

When you're faced with an incident what do you do? Do you even realise there's an incident? Do you ignore it? Or do you hide under the covers? All these things happen and usually the best laid plans usually end up in the bin when an incident does strike. How can one prevent this?  Think … Continue reading Incident Management →