[ISN] Security needs to be 'baked in' say experts

From: InfoSec News <alerts_at_private>
Date: Tue, 10 Mar 2009 06:11:24 -0600 (CST)
http://www.techworld.com/security/news/index.cfm?newsID=112289

By Tom Jowitt
Techworld
06 March 2009

A panel of security experts agreed that security needs to thought of a 
lot earlier in the software development lifecycle, and that the IT 
industry needs to start shipping "hardened" products, especially with 
the advent of the cloud and visualisation making the location of 
sensitive data even more difficult to locate.

Speaking at Alcatel-Lucent's Dynamic Enterprise forum in Paris this 
week, a panel of experts including Wyatt Starnes, the founder and CEO of 
verification provider SignaCert, discussed how there are now thousands 
of applications out there, and that the traditional model of securing 
them via third party or add-on security packages, is now outdated.

Starnes was previously the founder and CEO Tripwire, and is a cofounder 
of RAINS (Regional Alliances for Infrastructure and Network Security). 
Also speaking on the panel was Carlos Solari, previously a senior 
executive at the Federal Bureau of Investigation (FBI), as well Chief 
Information Officer for the Executive Office of the President (the White 
House). He is now VP of Security Solution and Strategy at 
Alcatel-Lucent.

"Clearly, the current approaches are not scalable to Web 2.0," said 
Solari. "With virtualisation, where does your data reside? We need to 
rethink the problem. After market, or bolt-on security technology is a 
failed model, as things are increasingly residing in the cloud now. A 
new approach is needed."

[...]


_______________________________________________      
Best Selling Security Books and More!
http://www.shopinfosecnews.org/
Received on Tue Mar 10 2009 - 05:11:24 PDT

This archive was generated by hypermail 2.2.0 : Tue Mar 10 2009 - 05:16:50 PDT