Bejtlich Quotes in Sourcefire Acquisition Story

Eric B. Parizo mentioned me in his story Snort users fear future under Check Point. One of the quotes appears as follows:

Richard Bejtlich, principal with Washington, D.C.-based consultancy Tao Security, said many fail to realize just how expensive it is to support a product like Snort.

"I've been to Sourcefire, and I've seen how many people they have working on the product and on signatures," Bejtlich said. "They have what seems like millions and millions of racks of equipment. I was surprised they were able to continue with Snort as they did."

That should say "millions and millions of dollars of racks of equipment." I obviously haven't seen millions of racks of anything when I visit Sourcefire!

Also, I appear to have been demoted at my own company. I am not a "principle" at TaoSecurity. My boss must be upset with my performance! :)

Comments

Anonymous said…
LOL Richard, we all saw your demotion coming since your pace of teaching, working, reviewing books, and writing is just unacceptable ;-)

I do have to chuckle at your own typo there too. I once received new business cards that identified me as a "Principle Architect." Perhaps it was a message that I was "Principal Architect" in principle only ;-)
9:46 AM
Anonymous said…
Reminds me of a local Chinese resturaunt. When they first opened, they purchased lots of promotional items. Problem was, the name of the resturaunt is "Chopsticks". The swag company mis-spelled it as "Chapsticks"...
10:58 AM
Anonymous said…
You've been promoted! Look at the article again.
12:22 PM
Anonymous said…
The last blogger is correct - Parizo's article has been updated to accurately portray your comment/position.

But let's be honest Richard, considernig I have a little one on the way, myself, and I'm celebrating my first wedding anniversary this weekend, we all know who are the real Bosses of TaoSecurity - give my regards to Amy and Elise!
Sean C.
10:12 PM
Sean C said…
Actually, now that I read the full Parizo article, I realize that Richard is being more than lenient in his blog concerning the quotes from another person quoted in the sane article. Notice the quote from Gartner's Research Vice President, Greg Young, - "...Young said the intrusion detection market has been in decline for some time...". Umm, isn't this the same Gartner that said IDS would be obsolete by 2005?

http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci905961,00.html

Now, per Gartner, IDS isn't as much in decline as being bought out for just a tad under 1/4 of a billion dollars! But, to be fair to Gartner, while Snort is IDS, IDS isn't just Snort (and to be more than fair to Sourcefire - Sourcefire isn't just Snort). But, I really don't feel like being fair to Gartner at this time.

Ok, again off my soapbox,
Sean C.
# posted by
10:56 PM
Anonymous said…
Um, Sean C - they aren't paying all that money for IDS dude. IPS + RNA etc.
1:15 AM
Post a Comment

Popular posts from this blog

Zeek in Action Videos

Image
This is a quick note to point blog readers to my Zeek in Action YouTube video series for the Zeek network security monitoring project .  Each video addresses a topic that I think might be of interest to people trying to understand their network using Zeek and adjacent tools and approaches, like Suricata, Wireshark, and so on.  I am especially pleased with Video 6 on monitoring wireless networks . It took me several weeks to research material for this video. I had to buy new hardware and experiment with a Linux distro that I had not used before -- Parrot .  Please like and subscribe, and let me know if there is a topic you think might make a good video.
Read more

MITRE ATT&CK Tactics Are Not Tactics

Image
Just what are "tactics"? Introduction MITRE ATT&CK  is a great resource, but something about it has bothered me since I first heard about it several years ago. It's a minor point, but I wanted to document it in case it confuses anyone else. The MITRE ATT&CK Design and Philosophy document from March 2020 says the following: At a high-level, ATT&CK is a behavioral model that consists of the following core components: • Tactics, denoting short-term, tactical adversary goals during an attack; • Techniques, describing the means by which adversaries achieve tactical goals; • Sub-techniques, describing more specific means by which adversaries achieve tactical goals at a lower level than techniques; and • Documented adversary usage of techniques, their procedures, and other metadata. My concern is with MITRE's definition of "tactics" as "short-term, tactical adversary goals during an attack," which is oddly recursive. The key word in the tacti...
Read more

New Book! The Best of TaoSecurity Blog, Volume 4

Image
  I've completed the TaoSecurity Blog book series . The new book is  The Best of TaoSecurity Blog, Volume 4: Beyond the Blog with Articles, Testimony, and Scholarship .  It's available now for Kindle , and I'm working on the print edition.  I'm running a 50% off promo on Volumes 1-3 on Kindle through midnight 20 April. Take advantage before the prices go back up. I described the new title thus: Go beyond TaoSecurity Blog with this new volume from author Richard Bejtlich. In the first three volumes of the series, Mr. Bejtlich selected and republished the very best entries from 18 years of writing and over 18 million blog views, along with commentaries and additional material.  In this title, Mr. Bejtlich collects material that has not been published elsewhere, including articles that are no longer available or are stored in assorted digital or physical archives. Volume 4 offers early white papers that Mr. Bejtlich wrote as a network defender, either for technica...
Read more