 | | |
| | |
|
Spaces home  Kevin's SpacePhotosProfileFriendsMore |  Tools   |
Kevin's SpaceCurrent happenings and ramblings
January 14 So much for my new job title...From: Do you think you’re a strategist? You’re probably wrong.
October 28 Perfect is the enemy of goodTippett's approach smacks of commendable common sense. Not to be outdone by the geeks, however, he points out that it conforms to a standard theory of probability called Bayesian inference. Bayes, an 18th century theologian, developed a way to understand the likelihood of an event once new conditions could be applied to a given situation. Its applicability to security is that system hacking and computer incursions often involve not one, but a link-up of many failures to detect risk. Defining the probability of each risk separately adds nothing to an overall conception of the woes a company faces. In this way, risk can be thought of as a moving target. With Bayes's model, Tippett attempts to build the best possible net as a snare. If one control or solution is 80 percent effective, then it fails one out of five times, Tippett points out. Two controls, each 80 percent effective, together will fail one out of 25 times. Three 80 percent effective controls, operating together, will fail one out of 125 times. That's a 0.8 percent likelihood of failure, or a 99.2 percent probability of success. October 26 Tiger repellentGuy’s out walking in Manhattan when he sees a street vendor selling unmarked aerosol cans. He’s curious and asks what’s in them, and the vendor says, “Tiger repellent.” The guy points out that there are no tigers in New York City, and the vendor replies, “See how well it works?” August 13 2007 Commitments - Mid year check-inBack in January I posted here about 20 things that I plan to accomplish this year. Time to check in and see where I am.
July 19 Talking about My Live Search collectionJust for safe keeping, this is the area of focus for my house (condo) hunting. Quote My Live Search Maps collection July 03 Glacier National Park TripCathy and I are off on a Road Trip to Glacier National Park. see the route here: My Live Search Maps collection June 07 CISSP - Goal AttainedHappy to report that I can cross another item of my list. I received notice earlier this week that I passed my CISSP exam and will soon be certified. A candidate has to have their experience vouched for and then the certificate is sent out. It was a 250 question paper based exam. I'm happy to report that I learned quite a bit in the course of studying. June 04 Security PatternsI've been an advocate of patterns in security for some time now. Design patterns for software and even systems have been in place or are gaining additional acceptance. Its great to see the concept of patterns being advanced in security. Today I did some reading on CAPEC - the Common Attack Pattern Enumeration and Classification. My major critique is that is focused mainly on attack in the code, that is how an attacker would exploit weakness in the code base. Given my current position, I was hoping a project with this name might be focused on how to use intrusion detection techniques (host, net, etc) to model these attacks and react to them rather than just watching bits on the wire. May 05 The non-convergence of Physical and Info SecurityDespite what my CISSP text has been telling me...
http://apnews.myway.com/article/20070505/D8OTUCJ80.html As much as I think having a centralized, or at least unified, agency like the TSA is a good thing; it seems that they haven't mastered basic security concepts in their all around business if things breaches like this are able to occur. April 16 Two Americas
Today, there are two Americas, not one: One America that does the work, another that reaps the reward. One America that pays the taxes, another America that gets the tax breaks. One America that pays $40 dollars for a haircut, another that pays $400. Way to go John Edwards; you redefine the word hypocrite. Try not to sue anyone on the way to the parking lot. April 02 My new machineAfter nearly two years of dealing with the absolute lemon that was my Toshiba Tecra M3 (loud fan, finicky disk, video flicker, overheating, etc) the powers that be have bestowed a new laptop on me. Introducing:
Its a Toshiba Portege M400. I won't go all fan-boy and post my full specs in my sig, but you get the picture. Its an all around nice machine and my first tablet. Oh, and its running Vista out of the box! March 28 Death, Taxes, and Data LossTaxes are already done so mine as well focus on the 3rd one. Last night I turned on my DVR from Comcast to discover that my problems with a filling up hard drive and many shows to watch had been solved. The unit decided to delete everything from the drive leaving me with 0 recordings and 0 scheduled programs. Lets put that into perspective, its like:
Yes its thats bad, I'm not saying TV is a life or death thing, but I pay for a service. Now I now what Comcast is going to say: "Mr. Sullivan you pay $10/month for the DVR box". I'll argue that the box is useless without the data. This is a sentiment we hold dearly in the information security field. Furthermore, being a busy working professional I watch nearly 100% of my television programming from the DVR. In order for my $60/month cable tv subscription to be worth anything I need to have the full functionality including preserving recorded data until I view it. March 27 The little thingsits amazing how soothing taking care of little things can be...
i feel much better now! March 11 MCSE: Security - 5 Years in the MakingAnother one of my 2007 commitments is complete, this one on the professional side. I achieved the certification of Microsoft Certified Systems Engineer: Security for Windows Server 2003 This required 8 grueling exams. Strangely, I took the first test almost 5 years ago in April 2002 when I was still an undergraduate. Now I will be working on the CISSP exam. Restaurants in SeattleEarlier this year, I made a new year's commitment to explore more of Seattle's Restaurant scene and try new places instead of the same old belltown haunts that I've become used to, despite how good they are. Well, since we are coming up on the 1/4 way mark of 2007 here is a from memory listing of the places we have tried in the past 10 weeks in no particular order:
I should also give some mention to two out of town restaurants that we have greatly enjoyed this year: Glowbal Grill and Satay Bar - in Vancouver's Yaletown Neighborhood Brewhouse - in Whistler Village
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
Profile
Blog
Photos
Lists
Friends
