RSA 2009: Cloud computing will disrupt security market

The growing popularity of security being offered over the cloud will be a major disruptive force in the industry according to Philippe Courtot, chairman of Qualys.
##CONTINUE##
In his keynote to the RSA 2009 conference Courtot said that the move to a cloud model for security was essential, since current security methods were failing. Five years ago it would take 30 days to address half of a network's vulnerabilities but today, according to a recent Qualys study, that figure had barely dropped to 29.5 days.

“Something has to change,” he said.

“The cloud is going to be very disruptive but it offers some key advantages. One big advantage of software as a service model is you don't need to do a complex proof of concept, you can try and buy
It also gives users with ability to switch, as long as you can take your data and run.”

This would be highly disruptive to security product and service vendors he continued. In the future the most important purchasers of security products would be cloud suppliers, not enterprises.

However, several hurdles needed to be overcome before the cloud model was complete. The industry needs above all a secure browser. He praised the recent return of competition to the browser market and said that we would soon see a robust browser that could provide stability and security.

For the chief security officer the road ahead was more complex, since they would have to both manage existing systems and learn about the new cloud architecture. Nevertheless security professionals would still be needed to be the final arbiter of any change over to a cloud model.

But some, like security guru Bruce Schneier, dispute the claim that cloud computing will be a game changer. In a video interview with vnunet.com he explained his position.

“Cloud computing isn't anything new, it's the old client/server model,” he said.

“Fundamentally when you deal with computers in any form you have to trust your vendors, whether its your operating system vendors or your application vendors or your service vendors.”

-----------------------------
BY Iain Thomson in San Francisco
Source：vnunet.com

© Incisive Media Ltd. 2009 Incisive Media Limited, Haymarket House, 28-29 Haymarket, London SW1Y 4RX, is a company registered in England and Wales with company registration number 04038503.