Today we speak with Gerhard Eschelbeck, network security expert, author of the Laws of Vulnerabilities, and former chief information security officer at Google. He tells us about the ongoing chess match between hackers and defenders, why people remain the most important factors in online security, the significance of two-factor authentication, and the opportunity cloud computing presents to finally design security into the platform.
After 25 years in the security industry, Gerhard Eschelbeck recently retired from Google, where he was Vice President, Security and Privacy Engineering. He led the teams that ensure data and systems security, as well as user privacy. Gerhard has a passion for championing new technologies and is a trusted advisor and board member to several early stage startup companies. He published the original “Laws of Vulnerabilities” and is one of the inventors of the Common Vulnerability Scoring System (the CVSS). The CVSS provides a way to assign a numerical score to a security vulnerability. This helps organizations assess and prioritize their vulnerability management processes. Gerhard also holds numerous patents in the field of managed network security. Prior to joining Google, Gerhard was CTO and Senior Vice President at Sophos and Qualys, and served in senior product and technology roles at companies including Network Associates and McAfee. Gerhard has a Ph.D. in computer science from University Linz, Austria.