[wging]

I am not sure that I buy this. There are plenty of people who have internalized a painstaking and rigorous approach to problem solving, often from a young age. While many of these are also those who would excel in a mathematical environment, a mathematical education fails to capture any of the specific details of security.

[te_platt]

I don't think he is trying to say mathematics is sufficient to be good at security, just that training in mathematics develops the right mindset for security.

I have a degree in math and can see how my attitude changed as I progressed. When taking my first analysis class I was sure it is no coincidence the word begins with anal. It took a while for me to develop habits of skepticism about things that seem obvious at first glance. That's the attitude I think he is describing.

[cperciva]

When taking my first analysis class I was sure it is no coincidence the word begins with anal.

I'm going to steal that line, if you don't mind. :-)

It took a while for me to develop habits of skepticism about things that seem obvious at first glance. That's the attitude I think he is describing.

Yes. The attitude of "I don't care if this looks right; am I absolutely certain that it is right, in all possible universes consistent with my axioms".

[jdp23]

true, but the same's true for any rigorous training -- philosophy, Talmudic studies, law, physics, ...