• McAfee plans to acquire next-gen firewall with Stonesoft

    McAfee plans to acquire next-gen firewall with Stonesoft

    Finland-based security company Stonesoft, maker of SSL VPN, intrusion management and firewalls, has agreed to be acquired by Intel’s McAfee for $389m in cash. McAfee is already a serious player on the enterprise stage in intrusion management, as the fourth most-cited vendor in the 15th Information Security Study. Of course McAfee is much more well-known [...]

  • Are Application-aware Firewalls Displacing Traditional Ones?

    Are Application-aware Firewalls Displacing Traditional Ones?

    One of the hottest technologies in terms of greenfield implementations in the 15th Information Security Study was application-aware firewalls, according to TheInfoPro’s proprietary Heat Index. The technology, a fusion of application layer firewalls and stateful firewalls, continues a multi-year run of growth that has seen it rise in ‘in use’ percentage from 26% in 2010 [...]

  • No soap, radio!

    No soap, radio!

    As an analyst, I get a lot of vendor threat and breach reports in my inbox, and I try to read them all. What always gets me, though, is the clear disconnect between the two types of reports. Threat reports are what they sound like – they tally up ‘threats,’ although sometimes the word ‘threat’ [...]

  • Is NAC Coming Back?

    Is NAC Coming Back?

    Network access control, or NAC, a set of technologies designed to link network authentication of a device to certain security conditions being met (antivirus, vulnerability assessment, etc.), has for years held promise but nonetheless has bounced back and forth in terms of enterprise penetration. Back in 2009 NAC sat at 23% in use with 10% [...]

  • 9 out of 10 security pros recommend … PCI

    9 out of 10 security pros recommend … PCI

    As it turns out, security professionals’ recommendations aren’t any better than those from the PCI Council. In our long-format report, ‘The Real Cost of Security,’ we surveyed CISOs, consultants and members of security teams to ask them what technologies an organization of 1,000 people should buy for effective security. The results may surprise some of [...]

  • Security Management

    more »
  • 50 shades of demo

    50 shades of demo

    They say a picture is worth a thousand words, but a live demo that implodes is worth at least ten thousand. In the 451 Research Enterprise Security Practice, we cover around 350 security vendors at any given time. This means

    May 08, 2013 | 0 comments | View Post

  • No soap, radio!

    No soap, radio!

    As an analyst, I get a lot of vendor threat and breach reports in my inbox, and I try to read them all. What always gets me, though, is the clear disconnect between the two types of reports. Threat reports

    Apr 29, 2013 | 0 comments | View Post

  • Endpoint Security

    more »
  • Is NAC Coming Back?

    Is NAC Coming Back?

    Network access control, or NAC, a set of technologies designed to link network authentication of a device to certain security conditions being met (antivirus, vulnerability assessment, etc.), has for years held promise but nonetheless has bounced back and forth in

    Apr 25, 2013 | 0 comments | View Post

  • 2013’s Q1 Security Projects

    2013’s Q1 Security Projects

    A frequent question we receive and one that TheInfoPro data is uniquely positioned to provide an answer for, is which key information security projects will receive the benefit of increased funding in 2013. Recall from earlier that 47% of security

    Jan 09, 2013 | 0 comments | View Post

  • Authentication

    more »
  • Multifactor Authentication in the Enterprise

    Multifactor Authentication in the Enterprise

    Dual-factor authentication products, facilitating logging into an application or service with two of the three different authentication factors (something you know, are, or have), came back into the spotlight last week with Microsoft’s acquisition of PhoneFactor. Dual-factor authentication also comes

    Oct 15, 2012 | 0 comments | View Post

  • The OTHER Problem with Passwords

    The OTHER Problem with Passwords

    There are some sites that I use very rarely, and I can never remember what I used for a password there. But it doesn’t matter, because honestly, the reset procedure is less onerous than trying a few passwords and risking

    Aug 29, 2012 | 0 comments | View Post

  • Incident Response

    more »
  • Infosec: Too Many Questions

    Infosec: Too Many Questions

    As an analyst, I have too many things I’d love to research and can’t.  I’m in a target-rich environment (then again, so was Custer). It doesn’t stop me from coming up with questions, though, and hoping someone else will want

    Jun 20, 2012 | 0 comments | View Post

  • For Great Justice – I Mean Security…

    For Great Justice – I Mean Security…

    The Verizon Data Breach Investigations Report (available here) was basically another year of “all your POS are belong to us.” Which is depressing, but not at all surprising.  As you know, I talk a lot about what I call the

    May 23, 2012 | 0 comments | View Post

  • Other Recent Articles

  • New WAN op installations stall

    New WAN op installations stall

    WAN optimization, or WAN op, a series of technical tricks that improve data transfer between network points, enjoyed a healthy rate of growth since 2009, when 32% of respondents had it ‘in use.’ This climbed to 47% ‘in use’ by 2010, and 53% in 2012. For the first time, however, in the latest preview of [...]

    May 09, 2013 | 0 comments | View Post

  • Only 63% of Enterprises Have Separate Security Function

    Only 63% of Enterprises Have Separate Security Function

    Only about 47% of enterprises (as represented by those interviewed in the 15th Security Study) have an executive on staff with a CISO/CSO or equivalent title. So perhaps it is little surprise that if only half of large enterprises have an executive whose sole responsibly is information security, that only 63% of the same interviewed [...]

    Apr 18, 2013 | 0 comments | View Post

  • Networking Budgets Continue Increases, But Show Signs of Flattening

    Networking Budgets Continue Increases, But Show Signs of Flattening

    Through a little more than half of the interviews that will be conducted in the 10th Networking Study, budgets continue to rise for network technology moving into 2013, but there is a sign that networking budgets will begin to flatten. Thirty-nine percent (39%) of respondents reported an increase in budget in the 2011-2012 time frame, [...]

    Apr 11, 2013 | 0 comments | View Post

  • Security Awareness – Is 10 Hours Enough?

    Security Awareness – Is 10 Hours Enough?

    The number two pain point in the Wave 15 Information Security Study was security awareness among the user populace, according to infosec managers. The chief complaint: users engaging in unnecessarily risky behavior, which was not surprisingly the third highest pain point. Despite this, the majority (51%) of infosec managers report spending only 1-10 hours on [...]

    Apr 04, 2013 | 1 comment | View Post