Filed under: Employee marketing, Random, Security | Tags: aegenis, branding, customer service, drew shearman, employee engagement, employee loyalty, fortinet, immunity, twitter
A few weeks ago I was sitting in my VP of products’ office when he pulled up a news clip from a Canadian TV station. The video showed a baffled news reporter trying to determine the story behind a many-mirrored Vespa parked out on the street. Meanwhile I sat baffled trying to figure out why Anthony was showing me this video. “There is a point to this, I promise,” he said.
Soon I saw it. The news camera zoomed on the license plate of the Vespa:

The reporter speculated that the personalization was short for “for tailgate” (a worthy guess, I might add) but we, of course, knew immediately that the “4TGATE” was short for FortiGate, the flagship product and new generation network security gateway developed by our company, Fortinet. Drew Shearman, soon revealed to be the Vespa’s owner, came out and explained to the news crew the inspiration behind the many mirrors and the story behind the personalized plate.
The first thing I did was drop an email to Shearman — who works out of our Vancouver office — and introduced myself and told him I was dying to know his story. Certainly he had to have been with the company since its inception, hence his incredible loyalty. Nope. He’ll be with the company just one year next month. More than that, Shearman works on Fortinet’s front line as a customer support engineer. He spends his days supporting customers, partners and even our sales engineers who call in with technical questions. In other words, he works hard.
I finally asked him: “Why?”
“The FortiGate is a great product and it is inspiring working for Ken Xie and watching how far he’s taken this company in a very short amount of time. My management is great and we have a great team dynamic in support,” Shearman said. “I get a lot of questions about what my license plate means. I just tell them it represents a great line of network security appliances and the amazing company that I work for.”
(Quick disclosure: Yes, I work for Fortinet marketing. No, this is not a fabricated quote.)
I continued to be baffled yet now I was also impressed. I swear I am not as cynical as I appear and I’m as loyal to my company as the next person. I’ll put in insane hours if need be and I take my tasks to heart. But it’s never even crossed my mind to do such a thing. In my exploration for answers I threw out a question to my Twitter followers. I wanted to know how far their loyalty to their companies goes.

The answers were varied and I initially found not one person who shared Shearman’s enthusiasm. The majority of the respondents reported back that they would only do something so permanent if they launched and had at least part ownership in a company. I compiled a sample of my favorite answers below:

Finally, I found a couple folks who share Shearman’s enthusiasm for their companies or their professions. My friend Mike Dahn, PCI guru and co-founder of The Aegenis Group, sent me this picture of his license plate:

And then Dave Aitel, founder and CTO of security company Immunity, sent me a picture of Kostya Kortchinsky’s tattoo — ink that several of his team’s members share in common as homage to the company:

I never did find anyone to admit to naming a pet after his or her employer. I’m sure that person exists somewhere; he or she is simply not in my Twitter network. Until I find ‘em, I will continue to be impressed with Dahn, the Immunity team and Shearman. It takes a special type of person to commit oneself so publicly to a company or a brand. Clearly these companies are doing something right to instill such loyalty in their employees.
It is complete coincidence that the folks who step forward with tales of loyalty work in the security industry. Have a tale to tell? A picture to show? A cat to admit to naming after your company? Leave a comment and I will include them in a potential follow-up case study on how these types of companies are bringing about such employee loyalty.
(Photo Credits: Vespa courtesy of Drew Shearman; PCI DSS license plate courtesy of Mike Dahn; Kostya Kortchinsky courtesy of Dave Aitel. All photos used with permission.)
Filed under: Security | Tags: anton chuvakin, bloggers, conference marketing, conferences, ethics, james costello, journalism, martin mckeay, michael santarcangelo, network security podcast, rsa, security catalyst, security roundtable, source boston
I am pretty excited to have made guest appearance on the re-convening of The Security Roundtable. Posted yesterday, we recorded this conversation right after this year’s RSA Conference. I was joined by the hosts Michael Santarcangelo and Martin McKeay, as well as Dr. Anton Chuvakin and James Costello.
We had a great, open and honest discussion about this year’s event literally “beyond the hype.” There was no vendor promotion and no gratuitous back-patting. We talked about issues from stemming from impressions of RSA overall, relevancy of the show content, bloggers vs. journalists ethics at conferences and in general, live blogging and other conference coverage antics, the Security Bloggers Meet-Up and so on. We had a lot of fun and I appreciated the interaction. I think you will, too.
Give it a listen: The Security Roundtable
Filed under: Security | Tags: live podcasting, network security podcast, rsa, rsa conference, rsa parties, Security, security bloggers meet-up, security twits, video feed

Wednesday, April 9
6-8 p.m.
Virtual Event Details To Be Announced at Network Security Podcast
“See” you there!
Filed under: Security | Tags: Security, source boston, yankee group, andrew jaquith, zero day, neosploit, herd intelligence, marketeers
Financially motivated malware is forcing anti-malware vendors to dramatically change their strategies – from remodeling their antivirus labs to the way they market their solutions. At least that is the take of Andrew Jaquith, Yankee Group analyst, who discussed this critical need for change during his SOURCE Boston talk: “Not Dead But Twitching – Antivirus Succumbs to the Scourge of Modern Malware.”
In an industry where security vendors self-congratulate and loudly beat their chests about what they claim to protect against, Jaquith states that current AV protection models are failing as zero day exploits become more sophisticated and malware creators become further incentivized by financial gain.
“Everyone is losing ground,” he said. “Public bravado belies private anguish.”
Jaquith talked about neosploit designer malware (one signature, one victim) and low-and-slow malware feeding denial of service-type attacks against AV labs as just two reasons that these labs need to consider changing their models.
“Most of the antivirus labs prioritize what they go after based on the infections they hear about,” Jaquith said. He went on to say that is only further driving the attackers to send a lot of tiny viruses and change the signature and content enough to slip under the radar.
Despite years of security investments, enterprises are still at a 99 percent penetration rate for antivirus and 63 percent of enterprises suffered a malware outbreak that impaired business. Vendors themselves are citing that they’ve had more malware samples in the last year than in the previous 10 years combined. Throwing more security research engineer bodies at the problem is not going to solve it.
“Today’s antivirus model is losing effectiveness,” Jaquith said. “The enemy is using its infinite ability to scale against the limited capabilities of the AV lab.”
But the biggest problem, he states, is that anti-malware industry itself, calling out the industry’s unwillingness to admit it is losing the battle, to band together, to hush the marketeers and to truly measure the effectiveness of anti-malware efforts.
“Either no one is telling or no one knows – how come no vendors can tell us what percent of anti-malware customers have actually been infected?” he asked.
Herd intelligence (using every endpoint as a collector) with behavior blocking, and taking the old antivirus prevention strategy and leveraging it as a detection strategy are solutions that he suggests.
“Security people think of prevention, detection and response. What AV is good at is protection and how it is marketed. If what you market is silver bullets you are damning yourself to live and die by prevention while the industry is moving to detection and response,” he said.
During his talk, Jaquith cited several vendors who claim to stop “all” malware threats or protect against “any viruses.” There’s a danger in that, he said, as no vendor can guarantee to stop all threats with antivirus solutions, especially with the mounting offenses that malware creators are taking against the AV labs. He pushed for more responsible marketing among all anti-malware vendors.
“Part of this is about the industry growing up. Some of this is tough love but it’s meant to suggest we’ll get beyond the silver bullet.”
(Cross-posted at the SOURCE Boston blog)
Filed under: Security | Tags: Security, security conference, source boston, tech target
I’m sitting in the prep suite of SOURCE Boston with Stacy Thayer, Christian Rioux, Raffy Marty, Ryan Naraine, Adam O’Donnell, Rob Cheyne and Michael Maziarz. The energy among this cast of characters is intense yet positive. There’s a lot of excitement over the event, and while we might be a little biased (with the exception of Ryan, of course), it seems others have high expectations as well.
Earlier today Dennis Fisher over at Tech Target posed the question, “Can SOURCE Boston save us from boring security conferences?”
“But there’s a little bit of light at the end of the tunnel from a new conference called Source Boston that’s set for this week. The speaker lineup looks really solid and the topics are not your average big picture drivel. They’re getting down into the weeds to find some things that haven’t been covered a thousand times before.”
So come out to the con. It’s not to late to sign up, even for a day. There are cool evening networking events, too. If you can’t come check back here for coverage of the activities. Or follow us on Twitter @SOURCEBoston. At the very least, we can promise you won’t be bored.
(Cross-posted to the SOURCE Boston blog)

