“My career has been about awareness and getting people to think about things that they don't have to think about."

"Is [info warfare] going to get nastier? Yes, it’s going to get nastier."

“The information security professional can’t be concerned with who it is that’s attacking his or her network... It’s all about the capabilities, and capabilities keep going up.”

"I'll tell you what my hope is, and maybe it's fairly unrealistic considering how long things take in the real world. It's where employees can get certifications that would be able to reduce risk cost, insurance costs and, from a real dollars and cents perspective, the losses are much less internal than external."

"Security is really about people and the technology should be absolutely incidental.” 

"Insiders are the key. Human firewalls and IDS."

"I see no reason that an operating system should not be self-repellant."

"What happened to the global electronic bill of rights we signed 61 years ago?"

"Who knew that a no-name like me would get umpteen visits from spooks and spies Information Warfare in 1992? They thought the book was classified information, written by the he-devil."