29 Quotes by John W. Thompson

First, I do not think there is any silver bullet to solving the technology side of the security equation.

We need to shift the paradigm from reactive technologies to more integrative solutions that deal with the variety and complexity of the threats that are out there today.

But what Web services suggest is that the connection is always there between an application that is resident somewhere in the cloud, and a user who is somewhere on the other end of a connection.

What we are seeing now is customers shifting their attention from security products like firewalls and intrusion sensors, to the policies that need to be in place, and the technologies that help them enforce policy compliance.

Well Web services are nothing more than a way for users to interact with applications.

First, our focus on security is on the infrastructure itself. So it is all about how you protect the network, the device, and the application that is riding on the server.

If you accept that security is a process, and if you can eliminate the human interaction or intervention in that process by automating more, that is a good thing.

Second issue is the rapidly accelerating increase in the number of vulnerabilities that get discovered every day. And, equally importantly, is the shortening of time between the discovery of the vulnerability and the release of an exploit.

So ensuring the integrity of the data and integrity and validity of the connection is a very important element in any company's strategy that is moving towards a Web service paradigm.