THE SINS OF SECURITY VENDOR RESEARCH

Summary from the TLDR InfoSec newsletter

Security vendors often provide valuable research, but also commit “sins” that diminish the value of the research. Security vendors often emphasize fear, uncertainty, and doubt by overdramatizing a risk and then suggesting that the only solution is their product, or ignoring prior research to imply a false sense of novelty for their product. Other research sins may involve statistical sins, such as drawing causations from mere correlation and allowing marketing to pollute the research.