Kevin Mitnick Quotes

Every single company knows that there is more that they can do to keep themselves safe from cyber-crime.

I keep my stuff updated all the time. Being in the security industry, I keep up to date with securities.

Well, the security business has been growing. I think security is one of those areas where it's to some degree not linear but maybe exponential growth.

You can't defend. You can't prevent. The only thing you can do is detect and respond.

You have to have as many defences in place as you possibly can. But even then of course - and it's important to stress this - you cannot guarantee being able to prevent every attack or every kind of attack.

Too many public and private entities simply don't take advantage of tools already at their disposal to protect themselves from hackers. No amount of information sharing will help solve that problem.

Technology companies have a front-line responsibility to secure their own networks, products, and platforms.

Security is an endless race - one that you can lead but never decisively win. Yesterday's best defenses cannot fend off the attacks of today or tomorrow.

The threat landscape continues to expand, while cyber threats are continually becoming more sophisticated. This has convinced organizations to expand their security policies and deploy more security solutions.

As cyber threats evolve, we need to evolve as well.

We need to increase cybersecurity awareness in both the private and public sector by 10,000 percent.

I don't expect an overnight change of all desktops to what the US Military used to call B3 level security. And even that would not stop users from shooting themselves into the foot.

Technology businesses in general are susceptible to hacking. That's why you have to work really, really, really hard with law enforcement, with security experts, internal and external groups, to make sure you're paying attention and addressing security concerns.

I won't be satisfied until I've put the entire security industry out of work.

While there have been terrific advances in the state of technology around heuristics, behavior blocking, and things like that, technology is only a part of the approach to solving the problem with the more important aspect involving putting the right process in place.

The guardians of your company's cyber security should be encouraged to network within the industry to swap information on the latest hacker tricks and most effective defenses.

I learned the technology and tradecraft of electronic security in self defense, with a lot of expert help.

I am regularly asked what the average Internet user can do to ensure his security. My first answer is usually 'Nothing; you're screwed'.

It is impossible to work in information technology without also engaging in social engineering.

Security is always going to be a cat and mouse game because there'll be people out there that are hunting for the zero day award, you have people that don't have configuration management, don't have vulnerability management, don't have patch management.

If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology.

Data leaks are impossible to reverse, so the best strategy is to prevent intruders from having prolonged, unfettered access to the systems in the first place.

Cybersecurity needs to be taken seriously by everyone.

Oracle is obsessed with security. It's an absolute requirement for all our products. The real security issue is when customers take older products that were not built for the Internet, and kind of rack them and put them on the Internet.

We're going to become the number one security company.