|
|
Resources
This my current list of other sources of opinion, commentary, and information that
I find valueable - for what, and why.
Innovation, Value, Creation, Entrepreneurship
I live in Silicon Valley and have spent a good chunk of my time on start-ups, so I can't help having my thinking about innovation and value be colored by the mythology and reality of the technology start-up. Here are three people whose combination of views are nicely complementary. Rich Mironov offers some excellent case based and practical views from point of view of a start up guy. Will Price offers a different view including but not limited to his perspective as a venture capitalist. I also offer Curt Carlson for his excellent, tried-and-true views on innovation in the tech business and beyond
-
Rich Mironov's Product Bytes
is one of my favorite sources of reading on both the innovative aspect of entrepreneurship, and the some of the nuts-and-bolts of delivering value. These newsletter-size essays focus on
“product strategy, technology startups, and how the two interact”
and always in an amusing and engaging way. After all, if you can't find ironic humor in the technology business, then you're missing one of the best ways to learn about it.
-
Will Price's
blog
is a good complement, in part because of his viewpoint from the venture capital business. But he also offers some interesting commentary on Tech Big Business too, partly as someone whose business is to benefit from tech start-ups becoming Big, but also as keen observer and good writer.
-
Curt Carlson
Curt Carlson
really does know from experience what he often talks about as “value creation.” I'm not a fan of “business books” generally, but his
Innovation: The Five Disciplines for Creating What Customers Want,
is one that really captured my view of innovation and expanded it, while remaining really “common sense” practical.
The book is a distillation of what he's done or seen applied many times, and in fact as CEO of SRI International http://www.sri.com Curt is been applying these sensible principles for many years, and has helped build SRI as an organization that applies them as well. SRI has a good short
summary
of these principles, and the process of using them.
Security News and Info
-
There are several Web sites offering a portal/news source for information security - many of them quite good. But I still like one of the oldest and still one of the best
Security Focus
hich has been able to expand and increase in value after having “gone commercial” some years ago. As always, it's is still one of a handful of definitive sources for detailed technical information on bugs and vulnerabilities, and the good old Bugtraq is still one of the best archives of information of this kind. But now there is also a pretty good variety of information relevant to enterprise-level security practice.
-
SANS
Is a great source of security training, but also has a well thought out
resources list
that includes some excellent FAQs on specific topics, including some entry level material.
-
And last but certainly not least in this group,
Wikipedia is fantastic - for many things of course, but also for security - for a high-level intro or a drill-down on particular buzzwords, of which IT security technology and business are so richly endowed.
Security Views
-
Ed Feltons's blog Freedom to Tinker is rather wide ranging, but security and privacy are common threads across technology, policy, news, and more. I particularly like Ed's ongoing coverage of electronic voting, a topic near to my heart.
-
Bruce Scheier is a prolific and well-known writer on security. His
CryptoGram
newsletter is a great source of information on a variety of topics related to security in the most general sense of the term. His
blog
offers more bite-size information, often in the form of brief comments and pointers to noteworthy news items related to security generally. I particularly appreciate Bruce's continuing view on airport and air travel security. Also, the CryptoGram archives are a treasure trove of security relevant information going back for almost a decade.
Bruce is also the author of the well-known and respected reference work
Applied Cryptography
which is great for those with an intellectual interest in crypto and how it is used, or more often than not mis-used (ironically, often by people who read the book and try a do-it-yourself project instead of using existing software implementations).
Practical Security
-
There are a actually several Web sites that are excellent sources of advice and information on practice security, oriented to a moderately technical audience, and focused mainly on Windows and/or a workstation or small-network environment. It's hard to choose one, but I like
CastleCops
particularly for the combination of helpful information, forums, wiki, and tool downloads.
-
SANS
and
Security Focus
are also good sources of practical information, tools, etc.
-
I can't say that I've often directedly used information in the
Microsoft Security Newsletter
but I always scan or read both the IT professional and the home user versions. Aside from the interesting comparison between the two, reading them provides a good sense of the breadth of technology that gets put under the rubric of “security” just within the parts of the overall IT world that are covered by Microsoft's editors in these newsletters.
|
|
Consulting
I also provide two kinds of consulting services:
information security consulting and
technology strategy consulting.
There's an
overview
of me and my practice, a summary of the specific consulting
services,
and a summary of my
experience
plus my bio, resume, and publications.
|
Opinion, Commentary, and Resources