As I view the landscape of emerging technologies, such as mobile devices, smart electrical grids and my current passion - cloud computing, it is apparent to me that innovation has not made common cause with security, and likely never will.
I started reading SC Magazine over 15 years ago, pre-Haymarket, when I started my journey in the information security industry. Back then it was a small publication that gave users and vendors direct insight into emerging security technology, alerts and products.
As the complexity factor increases, requirements for security architects will be paramount. As more services are provided by partners accessing them via the extranet, the need for identity management, the ability to attest to the authenticity of the data, and the security of the environment will be a challenge.
In the last twenty years, the internet has made everyone equidistant. Today's technology-savvy crooks do not have to be physically near their victims; they may remain comfortable hundreds or thousands of miles away while they act. Through automation, they can perform reconnaissance on a large number of targets within minutes. They also don't have to take the time to physically carry cash and instead rely on electronic transfer.
Twenty years ago, IT security was just an afterthought at the bottom of everyone's priority list. The mischief that ensued was primarily for bragging rights and personal satisfaction. As businesses have transitioned to conducting 99+ percent of their essential functions electronically, the motivation has also shifted from egotistical to monetary. To say that IT security practices have not kept pace is an understatement.
During the past two decades malware has evolved significantly and has continuously raised the bar in terms of sophistication and pervasiveness.
Looking to where we are today, the biggest change is the convergence of security, privacy and data stewardship. No longer does the security professional need to consider intrusions, but the boarder impact of data governance, consumer rights as well as regulatory obligations.
One could look at a wide view of information security and see numerous events, applications and incidents that could be defined as catalyst for critical changes in information security. However, I believe that the overarching critical evolution is in the formalized development of the field of information assurance (IA)/security.
Sign up to our newsletters
SC Magazine Articles
- Study: 86 percent of websites contain at least one 'serious' vulnerability
- CareFirst BlueCross BlueShield breached, more than one million individuals notified
- Report: $19M breach settlement between MasterCard, Target terminated
- Logjam attack exposes data passed over TLS connections
- Google releases Chrome 43, addresses 37 bugs
- Hackers exploit Starbucks auto-reload feature to steal from customers
- Study: Nearly all SAP systems remain unpatched and vulnerable to attacks
- Former Nuclear Regulatory Commission employee arrested for alleged spear phishing campaign
- Millions of WordPress websites vulnerable to XSS bug
- FireEye first cybersecurity firm awarded DHS SAFETY Act certification
- Senate fails to pass USA Freedom Act; McConnell moves for revote of Patriot Act extension
- Android ransomware distributed to English speakers in spam campaign
- Site operator sentenced to 13 months for facilitating prostitution
- ISA presses for data to shape cyber security policy, encourages use of NIST framework
- Former Jacobi Medical Center employee improperly emails patient data