I've seen data on the cost of a breach including lot of surveys and research by Verizon and the Ponemon Institute. But in terms of an actual vulnerability, what are the factors to consider to ...
I see the main reasons for a firewall on a web server to be defense in depth and extra cushion for a possible admin error of running an unnecessary daemon. I'm trying to see if I am overlooking ...
I'm wondering if anyone has seen any case-studies or references from companies who have implemented a secure development process (eg, SDL or similar) around the cost/effort involved. Obviously each ...
In assigning budget rationally - ie proportionally to the risk in a particular area, how can you calculate the relative risks? I can think of examples where clients of mine have secured their ...
For a PHP CMS, what should I expect to budget for a security audit, both whitebox and blackbox? The codebase is about 85,000 LOC ("Lines of Code") and I would probably use a North American company for ...
How much money does it take to equip a fully funded black hat team? How much money to defend against such a team?
Richard Bejtlich wrote in July 2009 the following: "I submit that for $1 million per year an adversary could fund a Western-salaried black hat team that could penetrate and persist in roughly any ...