Trends in Security Thought

Security is Distinct from Individual Technologies and Products

• "A Process, not a Product"

• A product is only helpful to you if it addresses some need

A Holistic Approach is Essential to Security Engineering

• "Only as Strong as the Weakest Link"

• Penetration testing favors thoroughness

Thinking in terms of Risk Management

• Identifying assets and threats

• Making prudent investments in defense