[ news_security_news ] Forno On Failing Security
Doug Caverly Staff Writer
2006-08-14
Insider Reports RSS Feed
In the opinion of one security consultant, Internet security is a serious problem. Perhaps even more troubling, he argues, is the way in which the situation is deteriorating. This trend is driven by a large number of factors.
Richard Forno, an employee of KRvW Associates, expressed these views and others in an article posted on CNET. "Free-market financial interests and an unhealthy complacency by vendors and customers alike continue to overpower sound security logic and practices," he stated near the beginning of the piece.
Forno noted that many security products suffer from an "infrastructure plagued with problems." As for the way in which some companies have tried to account for this, he wrote, "Placing more complexity on top of existing (and flawed) complexity does not lead to increased protection, but rather, fosters a false sense of increased protection."
He went on to identify a number of problems that are "cultural, not technical." "Why are few - if any - security chiefs fired when their programs fail to stand up to challenge?" Forno asked. Then he pointed out that "today's technology procurement cycle requires customers to upgrade their products and remain current with their vendors' supported product lines (and revenue goals) by routinely replacing one ‘good enough' product with another one of equal standing."
"At that point," he continued, "like it or not, customers run up against unfamiliar products and potentially significant and unknown costs to their networks and organizations. Customers must reverse this practice by upgrading when they - not their vendors - deem it necessary."
Tag: Internet security
Add to Del.icio.us | Digg | Yahoo! My Web | Furl
Get all the updates in RSS:
About the Author:
Doug is a staff writer for SecurityProNews, InternetFinancialNews, SearchNewz, and WebProNews.
More news_security_news Articles
Insider Reports RSS Feed
|
|