About Andrew Hay

Andrew Hay is an information security industry veteran with close to 20 years of experience as a security practitioner, industry analyst, and executive. As the Chief Information Security Officer (CISO) at DataGravity, Inc., he advocates for the company’s total information security needs and is responsible for the development and delivery of the company’s comprehensive information security strategy.

Andrew has served in various roles and responsibilities at a number of companies including OpenDNS (now a Cisco company), CloudPassage, Inc., 451 Research, the University of Lethbridge, Capital G Bank Ltd. (now Clarien Bank Bermuda), Q1 Labs (now IBM), Nokia (now Check Point), Nortel Networks, Magma Communications (now Primus Canada), and Taima Corp (now Convergys).

Andrew is frequently approached to provide expert commentary on security-industry developments, and has been featured in such publications as Forbes, Bloomberg, Wired, USA Today, International Business Times, Sacramento Bee, Delhi Daily News, Austin Business Journal, Ars Technica, RT, VentureBeat, LeMondeInformatique, eWeek, TechRepublic, Infosecurity Magazine, The Data Center Journal, TechTarget, Network World, Computerworld, PCWorld, and CSO Magazine.

I did a quick search through Amazon to see what books are talking about OSSEC since we published the OSSEC Host-Based Intrusion Detection Guide in February of 2008. To remind everyone, OSSEC is an Open Source Host-based Intrusion Detection System. It performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response. Here is a quick rundown of what I have found based on my Amazon search: Malware Forensics: Investigating and Analyzing Malicious Code by Cameron H. Malin, Eoghan Casey, and James M. Aquilina - mentioned here on page 644. Security Framework for Attack Detection in Computer Networks...

Read More

As you've noticed, I haven't been posting much lately. I've been trying to wrap up everything here in Bermuda before our big move back to Canada. My last day at the office is on Wednesday - also the day that the movers come - and then we fly out at noon on Friday. We're both really excited and we're looking forward to getting back. Now a word about security. One of the things that we have to do is cancel our services, such as power, cable, Internet, and so on. What completely amazes me is how unsecure their process for doing...

Read More