4 ms·

My startup idea is cybersecurity software that does literally nothing. My competitive advantage would be speed, ease of use, low attack surface area, and perfec

My startup idea is cybersecurity software that does literally nothing. My competitive advantage would be speed, ease of use, low attack surface area, and perfect false positive rate.

mindslight 3y ago
I'm sorry to tell you, but it would fail. Being too fast would preclude creating attachment through the sunk costs required to run it. The ease of use would let users quickly determine that the software can't do what they want. The low attack surface would avoid necessitating widespread organizational buy in. And the zero false positive rate would mean that it wouldn't move the needle on any metrics.
- WatchDog 3y ago
  Haha, CSO's love to talk about how they blocked 3 million hacking attempts. In what amounts to tallying up dropped icmp packets.
  - buffet_overflow 3y ago
    A long time ago at a previous job, I had to report monthly on metrics relating to firewall deny events. I got an angry phone call to my desk phone from an executive, demanding to know why firewall deny events were down 10% in the previous month. Their tone changed when I mentioned the month in question was February, which conveniently is about 10% shorter than January.
marcus0x62 3y ago
That's not far off from a pew pew map[0]. Maybe you could start the first pure-play, best-in-breed security visualization company with AI-enabled[1] executive dashboards[2] 0 - https://www.csoonline.com/article/562681/8-top-cyber-attack-maps-and-how-to-use-them-2.html https://www.csoonline.com/article/562681/8-top-cyber-attack-... 1 - disclaimer: not actually AI enabled 2 - pew pew map
- alephnerd 3y ago
  It's called Cyber Ranges. SafeBreach, SimSpace, and Cymulate do similar stuff. That said, there is value to this (testing security policies before pushing to enforcement)
  - marcus0x62 3y ago
    No, not really. Cyber ranges are a very distinct concept/product category than threat visualization maps like you might see here: https://livethreatmap.radware.com/ https://livethreatmap.radware.com/ or here: https://isc.sans.edu/data/threatmap.html https://isc.sans.edu/data/threatmap.html Cyber Ranges (and pew pew maps) are also very different than control validation tools like Cymulate or Safe Breach…
    - alephnerd 3y ago
      Fair enough! I skimmed the comment and didn't read the entire thing. It's also not the segment I specialize in within the space

My startup idea is cybersecurity software that does literally nothing. My competitive advantage would be speed, ease of use, low attack surface area, and perfect false positive rate.

mindslight 3y ago

I'm sorry to tell you, but it would fail. Being too fast would preclude creating attachment through the sunk costs required to run it. The ease of use would let users quickly determine that the software can't do what they want. The low attack surface would avoid necessitating widespread organizational buy in. And the zero false positive rate would mean that it wouldn't move the needle on any metrics.

WatchDog 3y ago
Haha, CSO's love to talk about how they blocked 3 million hacking attempts. In what amounts to tallying up dropped icmp packets.
- buffet_overflow 3y ago
  A long time ago at a previous job, I had to report monthly on metrics relating to firewall deny events. I got an angry phone call to my desk phone from an executive, demanding to know why firewall deny events were down 10% in the previous month. Their tone changed when I mentioned the month in question was February, which conveniently is about 10% shorter than January.

marcus0x62 3y ago

That's not far off from a pew pew map[0]. Maybe you could start the first pure-play, best-in-breed security visualization company with AI-enabled[1] executive dashboards[2] 0 - https://www.csoonline.com/article/562681/8-top-cyber-attack-maps-and-how-to-use-them-2.html https://www.csoonline.com/article/562681/8-top-cyber-attack-... 1 - disclaimer: not actually AI enabled 2 - pew pew map

alephnerd 3y ago
It's called Cyber Ranges. SafeBreach, SimSpace, and Cymulate do similar stuff. That said, there is value to this (testing security policies before pushing to enforcement)
- marcus0x62 3y ago
  No, not really. Cyber ranges are a very distinct concept/product category than threat visualization maps like you might see here: https://livethreatmap.radware.com/ https://livethreatmap.radware.com/ or here: https://isc.sans.edu/data/threatmap.html https://isc.sans.edu/data/threatmap.html Cyber Ranges (and pew pew maps) are also very different than control validation tools like Cymulate or Safe Breach…
  - alephnerd 3y ago
    Fair enough! I skimmed the comment and didn't read the entire thing. It's also not the segment I specialize in within the space