Will IBM Transform Security? - Twenty-Four Seven Security

« Effective Security Must Be Proactive: A Podcast with Top Layer Networks | Main | Is PCI to Blame for TJX? »

November 02, 2007
Will IBM Transform Security?

Yesterday, IBM issued a press release announcing they have transformed security. If you haven't read the press release, you can do so right here. Quite simply, IBM announced that they have achieved the Holy Grail of computer security, which is a complete, end-to-end, one-stop shop for all of your security needs. As soon as I read the news, I immediately went...AH HAH!

While the announcement took me by surprise, I also have to say I saw it coming, and not only because IBM has been talking about an end-to-end solution all year long (and also buying companies in order to fill out their security portfolio).

But I guess what is missing is my true belief that it can be done. As IBM even said in the announcement, security is broken. But can they, will they, fix it? It reminds me a little of a Monty Python skit, where some loon tells everyone he is going to jump the English Channel. The fellow trains all year long, lifting, running, doing stretches, and even wears his best long underwear on the big day. A crowd gathers, the fellow runs and jumps...and lands about six feet out into the surf. A decent jump, but a jump wouldn't even clear a large English puddle.

But such doubt is almost too easy. It's almost knee-jerk doubt -- because it's never been done, it never will be done -- and I'm sure that's how most analysts will respond to the announcement.

I think what IBM is attempting absolutely needs to be done, and if it's a little bit of cart-before-the-horse, so be it. Yesterday, I got a chance to speak with Eric McNeil, Manager of IBM's Corporate Security Strategy, and one of the biggest doubts about IBM pulling it off is the sheer size of IBM. But when I asked Eric that question, he replied that, in fact, it would actually take a company of IBM's size to pull such a thing off.

And you know what? I think he's right. Will it succeed? You know, even if IBM gets within 85% of their goal of complete security, the opportunity to end all the growing security redundancies and improve performance and cut cost, is just too great not to risk it.

And isn't IBM the company that transformed itself from a stogy hardware company to a bit-less stogy software company a decade or so back? Look for my podcast with Eric McNeil either Tuesday or Wednesday of next week.