Matt Apuzzo Quotes

This program has been successful in detecting and preventing attacks inside the United States.

We must have the strictest adherence to security procedures to protect against compromise by hostile foreign powers.

As cyber threats evolve, we need to evolve as well.

There are major funding gaps for security research generally, particularly when it comes to defensive security practices and tools that will contribute to the protection and defense of the Internet.

You have to have as many defences in place as you possibly can. But even then of course - and it's important to stress this - you cannot guarantee being able to prevent every attack or every kind of attack.

Too many public and private entities simply don't take advantage of tools already at their disposal to protect themselves from hackers. No amount of information sharing will help solve that problem.

Security is an endless race - one that you can lead but never decisively win. Yesterday's best defenses cannot fend off the attacks of today or tomorrow.

Deviants from around the world are trying to 'beat' our system every day. We have to proactively identify suspicious behavior and quarantine users until additional verification steps can be taken.

Without those hackers, we wouldn't solve the problems we need to solve, especially security.

We have a reliable computerized network devoted to counterterrorist activities.

I keep my stuff updated all the time. Being in the security industry, I keep up to date with securities.

While there have been terrific advances in the state of technology around heuristics, behavior blocking, and things like that, technology is only a part of the approach to solving the problem with the more important aspect involving putting the right process in place.

You can't defend. You can't prevent. The only thing you can do is detect and respond.

I learned the technology and tradecraft of electronic security in self defense, with a lot of expert help.

Nothing is absolute in security.

Antivirus systems need to strike a balance between detecting all possible attacks without causing any false alarms. And while we try to improve on this all the time, there will never be a solution that is 100 percent perfect.

Personally, I tend to be more interested in security and performance-related issues than other things.

The only truly secure system is one that is powered off, cast in a block of concrete and sealed in a lead-lined room with armed guards -- and even then I have my doubts.

Building secure products actually makes for a safer world; many people in law enforcement may not agree with that.

Terrorists remain determined to find a weakness in our defence... To stay ahead of the terrorists, I call on the international community, the private sector, and academia to share knowledge, expertise, and resources to prevent new technologies becoming lethal terrorist weapons.

Ninety percent of cyber security companies begin in the detection stage. The issue is there are so many applications and alarming messages it is difficult for the user or the administrator to manage.

If you knew the user, you'd let them in. But, the content could contain a lot of dangerous stuff, even if you know the person using that content, you have to check what's inside there. That's where Fortinet started, trying to go deep inside of content, or inside an application to make sure those were secure.

Because I don't believe that it's really desirable to have security on a computer, I shouldn't be willing to help uphold the security regime.

If security were all that mattered, computers would never be turned on, let alone hooked into a network with literally millions of potential intruders.