Dan Kaminsky’s Prediction for the Next Silicon Valley
“Eighty four percent of Americans want something to be done with hacking,” said Dan Kaminsky (@dakami), chief scientist at White Ops Security, in our conversation at the 2015 Black Hat Conference in Las Vegas.
That’s amazing to Kaminsky who claims you can’t get 84 percent of Americans to agree on anything.
“These security problems are not just mainstream, they’re part of everyday life for everybody,” added Kaminsky. “But there’s consensus like there’s almost never consensus about anything … I see that consensus as being able to drive real genuine change.”
I responded by saying that consensus may be the result of people being more frightened by the increasing number of breaches. Kaminsky argued that we’re just aware of a problem that had always been there. We just didn’t know about it.
“When I see that breaches are way up, you think it’s because breaches are way up. I think it’s because our detection and correction of them is finally starting to happen,” said Kaminksy. “[Because of this newfound visibility,] the era of hopefully permanent compromise is, I’d like to say, if not coming to an end, at least everybody’s realizing just how bad it is.”
Kaminsky went on to predict that the country that figures out how to host secure networks is going to host the next Silicon Valley. He bases his prediction on what has happened in the auto industry. The U.S. use to be the dominant player until Japan figured how to build cars better and that diminished U.S. dominance in auto manufacturing.
I argued that startups in Silicon Valley don’t build any security into their product. Kaminsky said that this can be remedied by building security tools for startups just like we’ve built tools for entrepreneurs to construct businesses.
“We want to go ahead and tell the world this is how you build societies, this is how you build business. You use technology in a way that advances the speed of information,” said Kaminsky. “If we want to be able to tell people to do this, it has to be able to survive the onslaught and it’s not right now.”
Related Articles
How A CNAPP Can Take You From Cloud Security Novice To Native In 10 Steps
May 23, 2024Context is critical in cloud security. In a recent RSA presentation, Tenable's Shai Morag offered ten tips for end-to-end cloud infrastructure security.
Logs of Our Fathers
September 22, 2009<p>At USENIX in Anaheim, back in 2005, George Dyson treated us to a fantastic keynote speech about the early history of computing. You can catch a videotaped reprise of it <a href="http://www.ted.com/talks/lang/eng/george_dyson_at_the_birth_of_the_computer.html" target="_blank">here, on the TED site</a>. I highly recommend it - there's lots of interesting and quirky stuff. I managed to talk him into giving me a copy of his powerpoint file, and subsequently tracked him down and am re-posting this material with his permission.</p> <h3>November, 1951 </h3> <p style="TEXT-ALIGN: center"><a href="http://www.ranum.com/security/computer_security/papers/ur-syslogs/first_syslog.jpg" target="_blank"><img border="0" height="375" src="http://www.ranum.com/security/computer_security/papers/ur-syslogs/t/first_syslog.jpg" width="500" /></a> <br /><strong>Machine Log #1</strong></p>
ShmooCon 2009 - Playing Poker for Charity
February 12, 2009Tenable sponsored a booth at this year's ShmooCon and ran a Texas Hold'em table to help raise money for the Hackers for Charity organization. We raised close to $400 from conference attendees ...
Establishing a Cloud Security Program: Best Practices and Lessons Learned
September 26, 2024As we’ve developed Tenable’s cloud security program, we in the Infosec team have asked many questions and faced interesting challenges. Along the way, we’ve learned valuable lessons and incorporated key best practices. In this blog, we’ll discuss how we’ve approached implementing our cloud security program using Tenable Cloud Security, and share recommendations that you may find helpful.
Cybersecurity Snapshot: Critical Infrastructure Orgs Found Vulnerable to Basic Hacks, While New MITRE Tool Uses ML to Predict Attack Chains
September 20, 2024Report finds that many critical infrastructure networks can be breached using simple attacks. Plus, a new MITRE Engenuity tool uses machine learning to infer attack sequences. Meanwhile, CISA will lead a project to standardize civilian agencies’ cyber operations. And get the latest on XSS vulnerabilities, CIS Benchmarks and a China-backed botnet’s takedown!
An Analyst’s Guide to Cloud-Native Vulnerability Management: Where to Start and How to Scale
September 19, 2024Cloud-native workloads introduce a unique set of challenges that complicate traditional approaches to vulnerability management. Learn how to address these challenges and scale cloud-native VM in your org.
- Conferences