For the average home-user, anti-virus software is a must.

The human. Now you know all about your target

I characterize myself as a retired hacker. I'm applying what I know to improve security at companies.

I get hired to hack into computers now and sometimes it's actually easier than it was years ago.

But a lot of businesses out there don't see the return on investment, they look at it as a liability, and until they can understand that proactive security actually returns, gives them a return on investment, it's still a hard sell for people.

Both social engineering and technical attacks played a big part in what I was able to do. It was a hybrid. I used social engineering when it was appropriate, and exploited technical vulnerabilities when it was appropriate.

Companies spend millions of dollars on firewalls and secure access devices, and it's money wasted because none of these measures address the weakest link in the security chain: the people who use, administer and operate computer systems