Filtering by Category: Quotes
"WORST CASE SCENARIO: Even when the probability of that happening is low. Work from there, addressing all cases with higher probabilities that may lead to that worst case. Walk in the adversaries shoes."
"You want to strive for a light flexible program or plan. Remove the big parts."
"In all affairs it’s a healthy thing now and then to hang a question mark on the things you have long taken for granted. Many people would sooner die than think. In fact, they do."
-- Bertrand Russell
“The goal of training for alpine climbing can be summed up in one phrase: to make yourself as indestructible as possible. The harder you are to kill, the longer you will last in the mountains.”
— Mark Twight
Apply this mindset to security. Become resilient! By training to be harder to kill you are making your organization more prepared and more resilient to real-world attacks.
(via The Angry Red Teamer)
"Where zen ends, red teaming begins."
"Despite the fact that we pride ourselves on thinking laterally and creatively, we red teamers are still human, and as humans, we share a host of “wetware” issues with our non-red teaming colleagues. The difference? We’re aware of the issues (or at least we should be), and we (usually) try to do something about them. Even so, the issues persist."
-- Mark Mateski, Red Teaming: Closing The Gaps
"Prevention is a chosen action; reaction is a forced one. Act, don't react."
"Israel’s security doctrine was built around layers—each layer being more difficult to penetrate—and it was always best to engage a threat at the outermost layer. This was one of the pillars behind Israel’s reliance on dynamic proactive deterrence to strike out preemptively rather than absorb a preventable blow."
-- The Ghost Warriors: Inside Israel's Undercover War Against Suicide Terrorism, Samuel M. Katz