Comments on Infamous Agenda: Thoughts on the infosec industry

If we look at this in terms of root cause analysis...

2010-06-08T19:50:01.093+10:00

If we look at this in terms of root cause analysis the obvious answer is that the Internet is built on shaky foundations never intended for the widespread use we're seeing today.

Vendors hocking their wares is nothing more than treating the symptoms.

If we focus on aligning security with business direction and strategy, security happens far, far more seemlessly and things just WORK.

I strongly recommend you look into 'Geekonomics' as well.

From the perspective of someone thats been trying ...

2010-06-02T04:30:10.985+10:00

From the perspective of someone thats been trying to scrape his way into the industry for some years now what I've noticed is that its very much like trying to obtain credit for the very first time.

You can't get credit unless you have credit. In all of my dealings with the community it seems that they just wont 'let me in' until I achieve some sort of status - which defeats the purpose entirely.

I think part of what your describing - not enough interested parties are trying to get in - is because the folks at the perimeter won't let them in.

I can speak to that from personal experience.

Hi Matthew, I think you have hit the nail right on...

2010-06-01T22:58:22.957+10:00

Hi Matthew, I think you have hit the nail right on the head. Our approach to IT has been providing a solution for business and consumers without factoring in security.

Even on those occasions where security is considered, management might consider it a extra overhead and therefore should be dropped as part of the project in order to save costs.

Could you imagine if Microsoft says we will rebuild the windows architecture such that it neutralises computer viruses?

I don't see that happening.