Must Security Always Be Behind the Curve? - Twenty-Four Seven Security

« Dire Shortage of Security Skills | Main | Watch Out for These 5 Insider Security Threats »

March 10, 2008
Must Security Always Be Behind the Curve?

There are a lot of very interesting quotes on the recently published transcript from ebizQ's SOA Security roundtable, which you can find here.

The following quote is from Gunnar Peterson:

...security is really pretty much always going to be behind the curve.

When you think about it, that's pretty much how it's always going to be. Sure, security can sneak out in front the threats once in awhile, and with penetration testing, in some ways permanently, but if there's any industry that is more able to shift on a dime and change their means of attack, it's the hacker. How so? Well, as the barrier to entry for a hacker is next to nothing, if something effective is developed to stop them, they just move on en force to the next vulnerability (which they share via hacker bulletin boards).

Kind of like the mouse I recently found in my apartment. I've tried snap traps, glue traps, even tried steel wooling it out of my apartment, but I guess this mouse has seen it all, because the mouse is still around. But the one thing I have not done, and will never do, is accept the mouse.

And as a corporations will never accept the hacker's right to their data, security will always be behind the curve, blocking off the most recent exploit while the hackers move onto the next. Like a game of musical chairs, only the loser is always us.

So as SOA is pushing IT to turn everything into a service, SOA is shaping up to be one of the future battle grounds between hackers and security. All the more reason to pay a visit to our SOA security transcript here.

Also, I'm getting excited about our upcoming March security webinar that's going to dive straight into a frothing seas of future security threats, Threatscape 2008.