Cyber Risks · Krebs on Security

How to Break Into Security, Schneier Edition

Summary: In a Krebs on Security advice column, cryptographer Bruce Schneier told readers that computer security has many subspecialties and that you don't have to be a coder to be a security expert, while noting modern cryptography requires graduate-level mathematics. Schneier said the field requires a security mindset that thinks about how things can be made to fail rather than how they work, and cited his law that anyone can invent a security system clever enough that they cannot think of how to break it.

Why it matters: Schneier's point that prowess in security is demonstrated by what you can break, not what you can build, cuts against hiring and promotion practices that reward credentials and certifications over a demonstrated attacker's eye.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related