Share what you know with millions of people

Focus is the best place to turn what you know into remarkable content

×

Anton Chuvakin

Follow Following Unfollow

Consultant, Security Warrior Consulting

210 points

Dr. Anton Chuvakin is a recognized security expert in the field of log management and PCI DSS compliance. He is an author of books "Security Warrior" and "PCI Compliance" and a contributor to "Know Your Enemy II", "Information Security Management ...

Dr. Anton Chuvakin is a recognized security expert in the field of log management and PCI DSS compliance. He is an author of books "Security Warrior" and "PCI Compliance" and a contributor to "Know Your Enemy II", "Information Security Management Handbook" and others. Anton has published dozens of papers on log management, SIEM, correlation, security data analysis, PCI DSS, security management. His blog "Security Warrior" is one of the most popular in the industry.

In addition, Anton teaches classes and presents at many security conferences across the world; he recently addressed audiences in United States, UK, Singapore, Spain, Russia and other countries. He works on emerging security standards and serves on advisory boards of several security start-ups.

Currently, Anton is developing his security consulting practice, focusing on logging and PCI DSS compliance for security vendors and Fortune 500 organizations. Dr. Anton Chuvakin was formerly a Director of PCI Compliance Solutions at Qualys. Previously, Anton worked at LogLogic as a Chief Logging Evangelist, tasked with educating the world about the importance of logging for security, compliance and operations. Before LogLogic, Anton was employed by a security vendor in a strategic product management role. Anton earned his Ph.D. degree from Stony Brook University.

» read more » read less

WEB: Blog

May 26, 2011

Anton Chuvakin recommends this answer by erica byrd

How do we build enterprise mobile apps with a valid security model for enterprise data?

@Anton I can selectively remotely wipe the corporate data from any personal device and my enterprise users have acknowledged and signed statements from our legal council indicating compliance with this procedure. I do not see nor have I heard of existing legal issues with this ... more

Information Technology

Data Management

Enterprise Applications

April 28, 2011

Anton Chuvakin and 2 other people answered this question

Malware on the rise for mobile operating systems, what steps should end users and businesses take?

everything is entrenched and then we try to bolt the security on after-the-fact
Tongue-in-cheek... SO, you actually dare to doubt that this is how it will happen? :-)
You are right, of course. Planning has to happen now, where the pressure is lower. more

Information Technology

April 28, 2011

Anton Chuvakin recommends this answer by Erik Goldoff

Who is most to blame for successful malware attacks on company networks? IT, security vendors, users

While I don't want to minimize the responsibility of "the obligation of the owners and end-users to protect themselves..." , I respectfully have to disagree with your viewpoint.
At the risk of being pedantic, there is a difference between identifying the obligation of the end users, ... more

Information Technology

April 28, 2011

Anton Chuvakin recommends this answer by Erik Goldoff

When educating end users, how do you help them detect suspicious activity?

The best way to help educate end users on how to detect suspicious activity is to educate them to understand what the normal (baseline) activity is.
Make sure they know what brand antivirus software you have installed, also if you have it configured to display ... more

Information Technology

April 28, 2011

Anton Chuvakin and 6 other people answered this question

Focusing on network security - how does it improve bottom line for SMBs?

"how does it improve bottom line for SMBs?"
Does still having a business count as "improving the bottom line"?
I hate bad analogies as much as the next guy, but how does fire and flood insurance "improve the bottom line?" more

Information Technology

April 27, 2011

Anton Chuvakin and 14 other people answered this question

Focus Expert Meetup: Monday, May 2nd, San Francisco, CA

Will try to make it.

Expert Services

Expert Services Networking Event

April 21, 2011

Anton Chuvakin recommends this answer by Erik Goldoff

What are your top tips for security compliance management for SMBs?

One of the problems SMBs face with regards to compliance efforts is lack of budget. It is very difficult to justify spending money for a non-revenue generating effort. With total IT budgets around 1-1/2% of total revenue, most are likely underfunded anyway.
I would suggest :
1) ... more

Information Technology

April 21, 2011

Anton Chuvakin and 3 other people answered this question

What were your major take-aways from Verizon's 2011 Data Breach Investigations Report?

Summarized here: http://chuvakin.blogspot.com/2011/04/verizon-dbir-2011-is-out.html

Information Technology

March 22, 2011

Anton Chuvakin recommends this answer by Amy Babinchak

Would it be unrealistic to ask cloud providers, like Amazon, to meet compliance requirements?

You must ask the question. A cloud provider, while not likely to make changes to meet your security needs, should provide detailed information on what they are offering. The cloud provider should only be engaged if their offering meets the security needs of your business. ... more

Information Technology

Cloud Computing

March 15, 2011

Anton Chuvakin recommends this answer by Andrew Baker

Are there limitations with data loss prevention technologies?

Brielle,
As Robin noted, we are going to need more details in order to effectively answer these questions.
The primary limitations of any data loss prevention technology would be people and cost. :)
You can protect many, many things very well, if you are willing to pay ... more

Information Technology

Data Loss Prevention

Data Management

Risk Management

March 15, 2011

Anton Chuvakin recommends this answer by Richard Stiennon

Network Security Best Practices: What are your 3 tips for developing a network security policy?

Thanks Anton for reminding us that the InfoSec policy comes first. But you still need a network security policy.
A network security policy should be written architecturally with these components:
1. Topology including: Internet connectivity, third party connectivity, wireless and WAN connectivity. Each type of ... more

General Management

Information Technology

March 14, 2011

Anton Chuvakin recommends this answer by Andrew Baker

What security functions would you look to outsource to an MSSP (Managed Security Service Provider) ?

For my current environment, none. :)
But, in general, I am open to outsourcing those security functions that are needed but for which I am unable to gain (or maintain) the necessary skill sets in-house.
Depending on factors like my industry, my organization's size and type, the ... more

Information Technology

Managed Service Providers

Following 2 Topics

Information Technology

Following 0 People

Followed by 18 People

Knowledgeable in 26 Topics

#6 of 300

Information Technology

#54 of 2263

#5 of 36

#6 of 40

#121 of 341

#157 of 419

General Management

#385 of 1194

#9 of 20

Security Solutions

#6 of 21

#10 of 30

#9 of 32

Servers and Storage

#41 of 157

#98 of 443

Cloud Computing

#162 of 462

Data Protection

#8 of 21

Operating Systems

#14 of 21

#17 of 24

IT Infrastructure

#24 of 36

#22 of 40

Data Management

#16 of 42

#25 of 45

#44 of 56

#43 of 64

#117 of 131

#636 of 822

#1699 of 2156