Business & Finance
News
2/23/2007
10:25 AM
Connect Directly
RSS
E-Mail
50%
50%

Meet Jeremiah Grossman, CTO Of WhiteHat Security

Jeremiah Grossman, a former information security officer at Yahoo, is on a quest to make Web apps more secure. He's ambitious, having founded WhiteHat Security in 2001--when many tech companies were closing up shop--to provide continuous security monitoring of Web-based apps, which he knew would play a major factor in the Web's resurgence. And he's not afraid to break a sweat.

Jeremiah Grossman
CTO Of WhiteHat Security

Interview by Larry Greenemeier


Jeremiah Grossman, CTO Of WhiteHat Security -- Photograph by Jeffery Newbury

Photograph by Jeffery Newbury

1
GONE PHISHIN'
Keeping out every phishing attack is important, Grossman says. "It only takes one phishing attack, and nobody wants to click on your links anymore. Once customers lose trust, it's really hard, if not impossible, to get it back."

2
JUST BROWSING
At last summer's Black Hat conference, Grossman predicted IT departments were 18 months away from attacks that would infect users' Web browsers with JavaScript malware embedded in the Web sites they visit. Once the browser is infected, the corporate network is next. Since that time, "I've only been confirmed in my belief, especially with the focus on cross-site scripting attacks on the Web."

3
SECURITY ADVOCATE
A founder of the Web Application Security Consortium and a contributing member of the Center for Internet Security Apache Benchmark Group, Grossman regularly posts his insights on several security e-mail lists. One clear message: "The payloads being delivered by Web application attacks are much more severe than in years past."

4
AYE, MATE
A fan of contact sports, Grossman has played Australian rules football in the Bay Area for three years. In football, "I play the ruck. That's the guy who always goes up for the ball and gets hit."

5
DEFENSE IN DEPTH
When he's not defending Web apps, Grossman is studying self-defense. He took up Brazilian jujitsu last year. "I've been an Ultimate Fighting Championship fan for years, and the jujitsu style of fighting is a lot of ground and pound; I really wanted to give it a try."

Comment  | 
Print  | 
More Insights
The Business of Going Digital
The Business of Going Digital
Digital business isn't about changing code; it's about changing what legacy sales, distribution, customer service, and product groups do in the new digital age. It's about bringing big data analytics, mobile, social, marketing automation, cloud computing, and the app economy together to launch new products and services. We're seeing new titles in this digital revolution, new responsibilities, new business models, and major shifts in technology spending.
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek - July 21, 2014
Our new survey shows fed agencies focusing more on security, as they should, but they're still behind the times with cloud and overall innovation.
Flash Poll
Video
Slideshows
Twitter Feed
InformationWeek Radio
Archived InformationWeek Radio
In this special, sponsored radio episode we’ll look at some terms around converged infrastructures and talk about how they’ve been applied in the past. Then we’ll turn to the present to see what’s changing.
Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.