Security Management Strategies for the CIOAccess "The future of software security vulnerabilities"
This article is part of the April 2004 issue of Depth charge: Survey shows big spending on defense in depth
In the late '90s, the security market boomed as organizations deployed network-based solutions. Yet, exploits continue to rise despite years of investment in firewalls, IDSes, AV and cryptography. In the future, attackers will have a tougher time picking targets, as platforms with tailored functions offer a much narrower target. Why? Because network-based defense mechanisms don't address the heart of the problem: bad software. Perimeter defenses are reactive: They block packets to this or that port; scan for files that include this or that pattern; and throw partial and oversized packets away without looking at them. We're scrambling to compensate for the porous software that processes the packets penetrating our perimeter defenses. This software security problem will likely get worse before it gets better because the software itself is changing faster than software security technology. We've identified seven broad trends that will help you understand how software is evolving and how it will impact security. We believe these trends will exacerbate the root ... Access >>>
Access TechTarget
Premium Content for Free.
What's Inside
Features
-
-
IT security spending 2004: Firms diversify as security budgets tighten
by Andrew Briney
Fearing the worst on IT security spending, companies are diversifying their security spending.
-
Audit failure: How one lab raised IT security awareness and its audit grade
by Anne Saita
Learn how Argonne National Lab raised IT security awareness and its audit grade from 'F' to 'A'.
-
IT security spending 2004: Firms diversify as security budgets tighten
by Andrew Briney
-
-
The future of software security vulnerabilities
by Gary McGraw & Greg Hoglund
The evolution of software security vulnerabilities opens new vistas for business... and the bad guys.
-
Ensure audit success with sound security audit procedures
by George Wrenn
A security review doesn't have to be a sink-or-swim proposition.
-
The future of software security vulnerabilities
by Gary McGraw & Greg Hoglund
-
Columns
-
Using tax depreciation to increase security budgets
by Lawrence Walsh
The depreciation of capital assets, such as security hardware and software, is a tax benefit that every infosec manager should take into consideration.
-
Cyberwar myths: Are cyberwarfare and cyberterrorism overblown?
by Marcus Ranum
Marcus Ranum explains why the whole notion of cyberwarfare is a scam.
-
A little betrayal: Windows purists using Linux security features
by Jay Beale
Jay Beale explains how Windows purists can leverage Linux security features without compromising their allegiance to Redmond.
-
Database security tools for preventing SQL injection attacks
by Pete Lindstrom, Contributor
An emerging breed of database security tools is helping security teams spot attackers' favorite techniques, like SQL injection.
-
In enterprises, proactive information security finally taking hold
by Andrew Briney
Editorial director Andrew Briney says frustration with failure is driving proactive information security spending on new technologies.
-
Using tax depreciation to increase security budgets
by Lawrence Walsh
More Premium Content Accessible For Free
Unlock new pathways to network security architecture
E-Zine
Network security architecture is showing its age at many organizations. With new technology, different data types, and use of multi-generations of ...
Emerging threat detection techniques and products
E-Handbook
Advanced persistent threat (APT) has been a used and abused term in the security industry, but security experts say targeted attacks are a growing ...
The rapid evolution of MDM solutions
E-Zine
Mobile device management (MDM) continues to grow at a feverish pace, both in terms of adoption and mobile security features. BYOD policies, and the ...