To make real progress in cyber, we need to understand the cyber ecosystem better than we do today. We do not have enough data to model the behavior of public, private and underground actors, but we can make incremental progress by better sharing information.
These writings and media appearances reflect some of my professional interests and views.
Public / private partnership - 2022 RSA Conference
The FBI is the primary domestic intelligence agency and law enforcement agency for cyber. I had ...
We need offensive GenAI for defensive use
In this substack article, I argue that AI alignment efforts inhibit defensive capabilities. Read ...
SEC Incident Disclosure Rules - Tag Cyber
My conversation with Edward Amoroso at TAG Infosphere about the need to test your process for com...
Law Enforcement - Risks and benefits of AI
In this training session for the Dallas FBI, I covered some of the implications of GenAI for Law ...
Across the pond - Netacea
I joined host Andy Ash (CISO at Netacea) to discuss differences in how CISOs are compensated acro...
AI Defense - Gartner 2024 Security and Risk Management Summit
At the 2024 Gartner Security and Risk Management Summit, my session focused on defending in the A...
Defending in the Era of AI
At this week’s North American Information Security Summit, I made the following points under the ...
