Re: Researcher seeks volunteers for interview

[Joel Rosenblatt <joel () COLUMBIA EDU>]

You give away WAY to much info .. I answer the phone "Hello" :-)

Joel

--On Thursday, March 04, 2010 1:37 PM -0500 "Bradley, Stephen W. Mr." <bradlesw () MUOHIO EDU> wrote:

> I don't even answer the phone with anything other than "This is Steve".  I don't tell cold callers or anyone I don't do 
> business with what department I work
> in or anything about us.
>
> ;-)
>
> Steve
>
>
> -----Original Message-----
> From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Valdis 
> Kletnieks
> Sent: Thursday, March 04, 2010 1:05 PM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] Researcher seeks volunteers for interview
>
> On Thu, 04 Mar 2010 12:31:25 EST, Michelle Young said:
>
> > Research volunteers from the field of cyber security, 18 years of age and
> > older, are being sought to participate in a Penn State research study of
> > cyber security professionals.  Specifically, the research seeks to
> > understand how cyber security professionals make decisions under complex
> > circumstances.  The study involves a one-hour telephone interview to discuss
> > cognitive tasks, methods, and techniques used by the analyst to prevent and
> > detect cyber security attacks.
>
> Does detecting a social-engineering attack count? ;)
>
> Sorry Michelle - but that's somewhat a serious question.  Security professionals
> are by nature at least somewhat paranoid, and unlikely to volunteer info
> unless they're reasonably sure they know who they're talking to.
>
> And it isn't just you - we don't even have a good handle on the number of
> compromised zombie computers out there, because most of the people who have
> any hard data are often not talking because either their employer gets a
> competitive advantage from the hard data, or not wanting the black hats to
> know how much we do/don't know about their activities.



Joel Rosenblatt, Manager Network & Computer Security
Columbia Information Security Office (CISO)
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel