Jan. 11, 2023, 2:10 a.m. | Adam Shostack

cs.CR updates on arXiv.org arxiv.org

Engineering techniques to address the endless parade of security issues are
an important area of research. Properties of practices in industrial use are
rarely studied. Security workers satisfice. There is a widespread perception
that security work must be cumbersome, and thus there's no value to assessing
levels of effort. This is complemented by a belief that the nth day of work
will produce value equal to the first. These perceptions impact both practice
and research. This paper expands the acceptable …

address area engineering fast important industrial practices research security security issues techniques value work workers

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Information Security Engineers

@ D. E. Shaw Research | New York City

Staff DFIR Investigator

@ SentinelOne | United States - Remote

Senior Consultant.e (H/F) - Product & Industrial Cybersecurity

@ Wavestone | Puteaux, France

Information Security Analyst

@ StarCompliance | York, United Kingdom, Hybrid

Senior Cyber Security Analyst (IAM)

@ New York Power Authority | White Plains, US