George Hulme wrote on the CSO site: "There was an unusual level of gloom at the RSA Conference this year, and for good reason: a number of the biggest and most respected security firms have been very recently breached, including RSA Security, VeriSign, and Symantec.
"Stefan Savage, professor at the department of computer science and engineering, University of Calif., San Diego, observed that many of the perceived failures of IT security may be because the industry, largely, views security as a technical problem.
"There is a massive human component to security. While there are lots of technical things behind spam and botnets, there are people behind all of that, and then there are people who make mistakes that many times let them [spammers and botnets] through," said Savage.
He acknowleges the point I have been making these last few years. Yes, you need security software, and we will release something outselves shortly, but you also need to train the weak link in your security: humans! Here is the article:
http://www.csoonline.com/article/701390/rsa-conference-2012-post-mortem-it-security-in-a-precarious-spot-?
"Stefan Savage, professor at the department of computer science and engineering, University of Calif., San Diego, observed that many of the perceived failures of IT security may be because the industry, largely, views security as a technical problem.
"There is a massive human component to security. While there are lots of technical things behind spam and botnets, there are people behind all of that, and then there are people who make mistakes that many times let them [spammers and botnets] through," said Savage.
He acknowleges the point I have been making these last few years. Yes, you need security software, and we will release something outselves shortly, but you also need to train the weak link in your security: humans! Here is the article:
http://www.csoonline.com/article/701390/rsa-conference-2012-post-mortem-it-security-in-a-precarious-spot-?
