I hate to say it, but the way things are lining up, it's almost a certainty that things are going to get worse before they get better. And this comes at a time when almost anyone you ask on the business side of things (i.e. accounts payable) is sick to death of hearing about this threat and that threat which invariably leads to pay this and pay that.
But all of the things that make offices more efficient also works just as well for hackers. And the net is still relatively young, and who knows what it's going to look like and how we're going to interact with in 10 years from now (but if you want to know what threats to expect in the next few years, I highly recommend signing up for ebizQ's Threatscape 2008). One of the problems is, the killer security app has just the same chance of being invented as the killer security vulnerability.
I did have a fascinating conversation with Bruce Schneier about the very future of security, which I recorded, so make sure you look for it this Thursday.
Finally, the fact that many companies only spend money on security after an incident has taken place means that of course companies are going to start out with a bad feeling about our industry. And if the same company experiences a successful attack against them after deploying some security product, well, I can almost feel the resentment brewing already.
But that simply does not mean companies can just dismiss and ignore security altogether. It's going to have to become common knowledge that, in essence, "Hackers don't exploit companies unless the companies let them."
Leave a comment