Edward Snowden Quotes

When an attacker fails with one person, they often go to another person. The key is to report the attack to other departments. Workers should know to act like they are going along with what the hacker wants and take copious notes so the company will know what the hacker is trying to find.

Data leaks are impossible to reverse, so the best strategy is to prevent intruders from having prolonged, unfettered access to the systems in the first place.

We can find no successful terrorist attack that would have been prevented by the availability of a lawful decryption access technology ...

Nobody should be too boastful or too proud about their security because there are people who have a major interest in cracking the security of networks, the security of companies.

Cybersecurity needs to be taken seriously by everyone.

I talked to the general counsel of the DNC, and he assures me that every step along the way, when we were notified of these issues, that we changed systems, changed procedures, but these hackers are so sophisticated that they changed procedures.

We need to take lessons learned from fighting terrorism and apply them to cyber crime.

'Cyber-security' is one of those hot topics that has launched a thousand seminars and strategy papers without producing much in the way of policy.

What we've seen over the last decade is we've seen a departure from the traditional work of the National Security Agency. They've become sort of the national hacking agency, the national surveillance agency. And they've lost sight of the fact that everything they do is supposed to make us more secure as a nation and a society.

Given our law enforcement authorities, our central role in the Intelligence Community, and the span of our responsibilities - from counterterrorism to counterintelligence to criminal investigations - we're particularly well-positioned to address cyber threats to our national security.

Counterterrorism, cyberterrorism, it's real.

Encryption would help prevent a lot of cyber attacks.

The threat landscape continues to expand, while cyber threats are continually becoming more sophisticated. This has convinced organizations to expand their security policies and deploy more security solutions.

Cyberspace is the new domain of warfare.

Every single company knows that there is more that they can do to keep themselves safe from cyber-crime.

More organizations than ever are conducting business online. An expanding digital footprint and increasingly sophisticated cyber attacks have created a growing urgency to secure that data and the resources organizations are deploying.

I think it's a little premature to talk about response until we know exactly what happened, but we should know what happened. And we should know how to defend [against hackers attacks] ourselves without question.

In our efforts to battle terrorism and cyber attacks and biological weapons, all of us must be extremely aggressive. We must protect our people from danger and keep America safe and free.

There are cyber threats out there, this is a dangerous world, and we have to be safe, we have to be secure no matter the cost.

I think we need to get to the bottom of it. And I think there should be an investigation [of hackers attacks] because in order to defend ourselves against other adversarial countries, we have to protect our information.

We contacted the FBI months ago, when the DNC issue came about. They've reviewed all of our systems. We have hacking detection systems in place.

We put up the very best cyber security - what I call infrastructure to stop them, but [hackers] constantly [didn't stop].

I also want to make sure that when we debate these things [hackers attacks], that we actually have the facts that are very clear in front of us to have this debate.

In terms of my conversations with [Vladimir] Putin, these are conversations that took place before the election. As I indicated, there has been very clear proof that they have engaged in cyber attacks. This isn't new. It's not unique to Russia. There are a number of states where we've seen low-level cyber attacks and industrial espionage and, you know, other behavior that we think should be out of bounds.

The methods that will most effectively minimize the ability of intruders to compromise information security are comprehensive user training and education. Enacting policies and procedures simply won't suffice. Even with oversight the policies and procedures may not be effective: my access to Motorola, Nokia, ATT, Sun depended upon the willingness of people to bypass policies and procedures that were in place for years before I compromised them successfully.