Speaking of Security – The RSA Blog and Podcast

Some good folks and I wrote a security brief detailing strategies for effectively evolving security operations in the face of escalating APTs. Rather than just put it out there, I thought it would be worth diving into why SOCS need to be more intelligent!

• 

Any discipline when sufficiently advanced will exhibit many of the same traits, building as Art Coviello mentioned on Tuesday in his keynote, on the shoulders of giants. The painful work of building wisdom, learning to work together and establishing procedures for what once seemed impossible can eventually make miracles commonplace.

• 

I was staying in a hotel in Boston recently and thought I heard a dog bark every time I went into my room but as it was just a single ‘woof’ I didn’t take much notice.

• 

Talking with customers every day, I hear constant concerns about lack of visibility into (and control over) security and compliance in the virtual infrastructure, lack of guidance and orchestration tools and the high cost and difficulty of meeting audits and achieving compliance.

• 

Here it is: a security guy saying it’s not about security. I am a security guy, so here goes…

It’s not about security.

• 

The Lockheed Martin Cyber Security Alliance today announced a critical survey and data related to US government adoption of cloud services. Most importantly, it issued a related white paper on “Awareness, Trust, and Security to Shape Cloud Adoption” that address full-on the perception (as opposed to the realities) of

• 

The Speaking of Security podcast team is on-site at RSA Conference in San Francisco. Learn about how EMC and RSA, along with VMware and Intel are collaborating on a Proof-of Concept for business-critical security, compliance and control in the cloud. We also discuss a new RSA Security Brief that presents an executive-level overview of the challenges involved.

• 

I met with a customer the other day who said that they aren’t allowed to talk about the cloud without making a small, open palm gesture, moving the hand in a circle. It was funny when he did the little motion, and the reason for the humor is that the Cloud is everywhere; and there are almost as many definitions and explanations for it (legitimate and illegitimate).

• 

VMware’s acquisition of Zimbra is a big step towards delivering IT as a service and signals VMware’s intention to deliver the benefits of virtualization and cloud computing all the way from the infrastructure to the platform to the application layer.

• 

A special edition of the Speaking of Security podcast looks ahead to 2010 through the eyes of three of RSA’s top bloggers. Uri Rivner, Sam Curry and Shannon Kellogg talk security in the new year.

•