Dave Shackleford

Industry Expert | LinkedIn

Dave Shackleford is founder and principal consultant at Voodoo Security, as well as a SANS analyst, instructor and course author, and GIAC technical director. He has consulted with hundreds of organizations in the areas of security, regulatory compliance, and network architecture and engineering. He is a VMware vExpert and has extensive experience designing and configuring secure virtualized infrastructures. Shackleford was previously CSO at Configuresoft, CTO at the Center for Internet Security, and a security architect, analyst and manager for several Fortune 500 companies. He is co-author of Hands-On Information Security from Course Technology and author of Virtualization Security from Sybex. He has co-authored numerous courses on virtualization and cloud security for the SANS Institute. Shackleford currently serves on the board of directors at the SANS Technology Institute.

Email [email protected]

Submit a tip to our team

123 articles by Dave Shackleford

Filter by month:

CISO’s guide to data obfuscation
July 28, 2026
Common MFA mistakes -- and how to fix them
July 9, 2026
Cloud security metrics and KPIs: A CISO’s guide
June 16, 2026
Top identity and access management risks
June 9, 2026
CISO’s guide to data minimization
June 8, 2026
Buyer’s guide for CISOs: Cloud security posture management
May 6, 2026
Cloud security architecture: Enterprise cloud blueprint for CISOs
April 2, 2026
Counter third-party risk with continuous vendor monitoring
Feb. 26, 2026
Why organizations need cloud attack surface management
Feb. 6, 2026
CISO’s guide to nonhuman identity security
Jan. 7, 2026
Guide to cloud container security risks and best practices
Dec. 12, 2025
When to consider Kubernetes security posture management
Nov. 19, 2025
CNAPP vs. CSPM: Comparing cloud security tools
Nov. 10, 2025
Browser detection and response fills gaps in security programs
Nov. 3, 2025
CSPM vs. DSPM: Complementary security posture tools
Oct. 21, 2025
CISO’s guide to security vendor consolidation
Sept. 10, 2025
Prevent and manage cloud shadow AI with policies and tools
Aug. 7, 2025
How to discover and manage shadow APIs
July 25, 2025
How to implement security control rationalization
July 25, 2025
What is residual risk? How is it different from inherent risk?
June 23, 2025
How to choose a cloud key management service
May 21, 2025
What is risk exposure in business?
April 24, 2025
How to effectively respond to a ransomware attack
April 15, 2025
How to prevent and protect against ransomware
April 9, 2025
Benefits and challenges of zero standing privileges
March 26, 2025
13 API security best practices to protect your business
March 20, 2025
Cloud PAM benefits, challenges and adoption best practices
Feb. 4, 2025
Cloud migration security challenges and best practices
Dec. 26, 2024
User provisioning and deprovisioning: Why it matters for IAM
Nov. 20, 2024
How to create an enterprise cloud security budget
Nov. 7, 2024
10 API security testing tools to mitigate risk
Nov. 4, 2024
API security testing checklist: 7 key steps
Nov. 1, 2024
ASPM vs. ASOC: How do they differ?
Sept. 23, 2024
Threat hunting frameworks, techniques and methodologies
Sept. 6, 2024
Too many cloud security tools? Time for consolidation
Aug. 19, 2024
How to protect against cloud DDoS attacks
Aug. 6, 2024
8 cloud detection and response use cases
July 22, 2024
Cloud detection and response: CDR vs. EDR vs. NDR vs. XDR
July 22, 2024
How to conduct a cloud security assessment
July 18, 2024
SASE vs. SSE: Explaining the differences
June 11, 2024
Why it’s SASE and zero trust, not SASE vs. zero trust
June 10, 2024
Cloud security automation: Benefits and best practices
June 5, 2024
SSPM vs. CSPM: What’s the difference?
May 6, 2024
4 types of cloud security tools organizations need in 2024
April 15, 2024
Cloud database security: Best practices, challenges and threats
April 10, 2024
Cloud computing forensics techniques for evidence acquisition
April 2, 2024
How to manage third-party risk in the cloud
March 19, 2024
Multi-cloud security challenges and best practices
Feb. 28, 2024
Use cloud threat intelligence to protect critical data and assets
Feb. 22, 2024
6 multi-cloud identity management tips and best practices
Feb. 5, 2024
Top 8 cloud IAM best practices to implement
Feb. 1, 2024
7 cloud IAM challenges and how to address them
Jan. 31, 2024
Cloud incident response: Frameworks and best practices
Jan. 11, 2024
How to fix the top 5 cybersecurity vulnerabilities
Jan. 9, 2024
Top 7 cloud misconfigurations and best practices to avoid them
Oct. 26, 2023
How to develop a cloud backup ransomware protection strategy
Sept. 11, 2023
Supercloud security concerns foreshadow concept’s adoption
July 18, 2023
IaC security scanning tools, features and use cases
July 12, 2023
Plan ahead to reduce cloud forensics challenges
June 22, 2023
Low-code/no-code use cases for security
June 1, 2023
How to reduce risk with cloud attack surface management
May 10, 2023
How to mitigate low-code/no-code security challenges
March 28, 2023
4 cloud API security best practices
March 20, 2023
Low-code/no-code security risks climb as tools gain traction
Dec. 15, 2022
How to implement least privilege access in the cloud
Dec. 6, 2022
Types of cloud malware and how to defend against them
Oct. 27, 2022
Key factors to achieve data security in cloud computing
July 18, 2022
SecOps vs. CloudSecOps: What does a CloudSecOps team do?
July 14, 2022
How hackers use AI and machine learning to target enterprises
June 16, 2022
3 ways to apply security by design in the cloud
May 12, 2022
Is cloud critical infrastructure? Prep now for provider outages
April 29, 2022
2 zero-trust cloud security models emerge as demands shift
March 21, 2022
Cloud-native security architecture principles and controls
Jan. 18, 2022
How to overcome 3 multi-tenancy security issues
Nov. 9, 2021
Cloud-native security benefits and use cases
Aug. 11, 2021
How to build a cloud security observability strategy
May 19, 2021
How to use CIS benchmarks to improve public cloud security
May 6, 2021
Get to know cloud-based identity governance capabilities
April 15, 2021
6 AIOps security use cases to safeguard the cloud
March 18, 2021
Organize a cloud IAM team to secure software-defined assets
Jan. 6, 2021
How cloud-based SIEM tools benefit SOC teams
Dec. 9, 2020
How to use the Mitre ATT&CK framework for cloud security
Nov. 13, 2020
Using SDP as a VPN alternative to secure remote workforces
Nov. 3, 2020
How to build a cloud security operations center
Oct. 22, 2020
How to prepare for a zero-trust model in the cloud
Oct. 22, 2020
How cloud security posture management protects multi-cloud
Sept. 10, 2020
Follow 3 key steps to improve multi-cloud monitoring
July 20, 2020
Privacy-preserving machine learning assuages infosec fears
June 29, 2020
Top 6 cloud security analytics use cases
May 27, 2020
How to address and mitigate serverless security issues
April 24, 2020
SASE identity policies enhance security and access control
April 6, 2020
Comparing SASE vs. traditional network security architectures
April 3, 2020
Get to know the elements of Secure Access Service Edge
March 17, 2020
Benefits of cloud data discovery tools and services multiply
Feb. 12, 2020
5 steps to a secure cloud control plane
Jan. 2, 2020
Learn some key cloud workload protection best practices
Dec. 19, 2019
What cloud workload security tools and controls work best?
Dec. 19, 2019
How to implement zero-trust cloud security
Dec. 5, 2019
Risks of container escape vulnerabilities and how to counter them
Nov. 6, 2019
How to beef up S3 bucket security to prevent a breach
Oct. 7, 2019
Complexity requires new cloud-based patch management strategies
Aug. 27, 2019
How to limit the cloud security blast radius of credential attacks
July 25, 2019
How to prevent cybersecurity attacks using this 4-part strategy
June 28, 2019
3 reasons privilege escalation in the cloud works
June 7, 2019
Why centralization in a multi-cloud security strategy is key
May 13, 2019
The risks of multi-cloud security compared to single cloud
May 7, 2019
How to build a strong cloud network security strategy
April 23, 2019
The problems with cloud-based email security
Feb. 28, 2019
Key steps to put your zero-trust security plan into action
Feb. 20, 2019
How to block public access for AWS S3 bucket security
Jan. 9, 2019
5 actionable deception-tech steps to take to fight hackers
Dec. 10, 2018
How the Microsoft Authenticator app integrates with Azure AD
Nov. 14, 2018
How deception technologies improve threat hunting, response
Nov. 5, 2018
How to monitor AWS credentials with the new Trailblazer tool
Oct. 17, 2018
Why container orchestration platforms risk data exposure
Aug. 22, 2018
The risks of container image repositories compared to GitHub
July 18, 2018
Fine-tuning incident response automation for optimal results
July 16, 2018
Are AWS certificate authority services trustworthy?
May 23, 2018
How to buy: Assessing next-gen firewalls
July 10, 2014
Amazon S3 encryption overview: How to secure data in the Amazon cloud
May 31, 2013
Security incident management in the cloud: Tackling the challenges
Sept. 25, 2012
Cloud security standards provide assessment guidelines
Jan. 27, 2011
Data classification best practices in financial services
Oct. 18, 2010

Select Newsletter: TechTarget AI Every M/W/F, starting Nov. 16th
Select Newsletter: TechTarget CIO Every M/W/F, starting Nov. 16th
Select Newsletter: TechTarget Data Every M/W/F, starting Nov. 16th
Select Newsletter: TechTarget Cybersecurity Every M/W/F, starting Nov. 16th
Select Newsletter: TechTarget Infrastructure Every M/W/F, starting Nov. 16th
Select user consent: By signing up to receive our newsletter, you agree to our Terms of Use and Privacy Policy. You can unsubscribe at anytime.

This website is owned and operated by Informa TechTarget, a global network that informs, influences and connects the world's technology buyers and sellers.

People also ask

Dave Shackleford

Get in touch

123 articles by Dave Shackleford