Due to the abundance of bugs and security flaws in applications and operating systems, many companies are seeing financial rewards in information security, driven by the threat of hackers, the risks of Internet accessibility, and terrorist attack possibilities.
James Martin, an Irish security consultant, found a bug in the mIRC client (which allows users to chat on the Internet) that would install malicious programs on users' computer if they connect to compromised servers. If the server sends a nickname of over 200 characters to a chatter's system, a buffer overflow will occur and cause that computer to be vulnerable to attack. Version 6.0 of mIRC is not vulnerable to this exploit.
Many security software makers are pulling in large profits even in this economy, and the hope is that this trend will continue. Because of the openness of the Internet and the high proliferation of increasing numbers of viruses, worms, and other software vulnerabilities, many businesses are spending more money on information security, and some say they will spend whatever it takes to make their data secure. Symantec, SonicWall, ISS, NetScreen Technologies, Trend Micro, and Network Associates have all posted profits exceeding analysts' expectations, and many say that trend is to continue.
U.S. government computers handling trillions of dollars of tax refunds and Social Security benefits are reported to still be vulnerable, even after previous warnings dating from 1997. The financial services arm of the Treasury Department is said to be putting massive amounts of critical data at risk for inappropriate disclosure, leaving billions of dollars of payments vulnerable to fraud and loss, and opening critical computer functions to hampering by disruption. The General Accounting Office (GAO) reports that some simple measures that could be put in place to protect these systems are: add passwords and locks, give employees no more than the proper access to data and systems they need, properly administer system software, do away with obsolete or duplicate software, and implement a comprehensive security program that covers the entire system.
Analysts say they expect security spending to grow to US$4.3 billion this year, 18% more than 2001. Because of the September 11 attacks and recent viruses and other software bugs, companies are aware now more than ever of the vulnerability and sensitivity of their data and systems, and it is thought that a significant number of software companies stand to benefit from this awareness because of the increase spending pertaining to information security-related issues.
Check out CNET for more details.
These are four different stories, all pertaining to the subject of security coming to the spotlight, and becoming the object of more spending. This means more money for security firms, and also increases the danger of rogue, untrustworthy companies starting up under the guise of information security and then going out of business because of either bad management or shoddy products.
With Symantec and Network Associates being the two largest competitors, they will hopefully set the standard for the industry so that smaller companies will have to adhere to that standard to compete. With the vulnerabilities of instant messaging software, the proliferation of viruses and other threats in a highly open Internet-connected world, the vulnerability of government computers for such critical operations, and many other threats on the horizon, as I predicted some time ago in a previous news item the security industry will indeed be the next economy booster.
USER COMMENTS 38 comment(s)
|Cool (11:45am EST Thu Feb 07 2002)
Seems like the direction to point my career to. I anticipated this but neglected to focus my efforts this way. My loss but maybe there is still time to get into it.
– by Necromancer
|MS (11:46am EST Thu Feb 07 2002)
..software is virtually bug free. – by Enron Exec
|Lets stick with Microsoft (11:50am EST Thu Feb 07 2002)
If we could all just use Microsoft Windows instead of those other crappy OS's like the mac and linux (that's linux NOT Linux).
We could all be better off. Everyone would be on the same page. – by ThePostman
|I agree with thePostman (11:54am EST Thu Feb 07 2002)
Things are much more simply with just one OS. Lets, face it – althought the other systems are good if not better than MS, they simple don't have the power that MS does to offer the level of support. I've had very good luch with MS support and would hate to fall back to Apple or Redhat. – by SpottedOwlEater
|Number 1 Job in IT (11:57am EST Thu Feb 07 2002)
The number 1 job in IT that we might see this year and in the future is not IT Management but IT Security.
Companies today is finally taking security as a serious issue.
Security Tool is going to be hot also and Security Stocks. – by WAMBO
|Dumb statements: SpottedOwlEater (12:01pm EST Thu Feb 07 2002)
“they simple don't have the power that MS does to offer”
I don't see a mainframe or supercomputer powered by Microsoft Windows.
“MS does to offer the level of support.”
When is the last time you got support from MS? Most of the MS support was from the front tier guys like IBM, Compaq, HP and Dell which is now supporting Linux now. – by E J
|E J (12:07pm EST Thu Feb 07 2002)
The last thing I heard was that Dell stopped offering Linux as an OS choice on new machines. This is a sign that Linux is on it's way out. Who wants to be confused by and OS that is built on 30 year old technology when MS has a nice, simple, easy to install OS that wont damage your monitor? – by SpottedOwlEater
|E J (12:07pm EST Thu Feb 07 2002)
When was the last time you ever got support from whoever you downloaded linux from ? oops, I mean when you stole others Intellectual property ?
Oops again. I bet you had to fix it yourself didn't ya ? – by ThePostman
|MS SUpport (12:09pm EST Thu Feb 07 2002)
Bill Gates is my bitch, he comes over my house to fix my computer when I have Windows problems. – by TheToothFairy
|Not Current SpottedOwlEater (12:15pm EST Thu Feb 07 2002)
Did you check your Dell catalog?
Buy a Dell System with Linux Factory Installed
|linux sucks (12:17pm EST Thu Feb 07 2002)
Its not secure either and you have to program it to use it. Unlike Windows which you can just use it. – by ThePostman
|byThePostman (12:23pm EST Thu Feb 07 2002)
“I bet you had to fix it yourself didn't ya ?”
Yes, because I am smart and linux is easier to fix.
Have you tried to fix Windows?
Windows on the other hand is still buggy and I am having a hell of time trying to edit the Windows registry to make it work properly. – by E J
|Another Dumb Statement by ThePostMan (12:25pm EST Thu Feb 07 2002)
has a more secure linux. Even though linux is secure.
And NSA means National SECURITY Agency. – by E J
|ThePostMan (12:32pm EST Thu Feb 07 2002)
“Unlike Windows which you can just use it.”
Anybody who has taken a computer science course in Univesity and College can use it, because Linux is like its cousin Unix. Oh. I guess you never went to college or university. – by E J
|E J (12:33pm EST Thu Feb 07 2002)
“Windows on the other hand is still buggy and I am having a hell of time trying to edit the Windows registry to make it work properly”
Linux has bugs too, do you want me to post links?
And NSA means NATIONAL security agency. – by mrkamikaze
|Another Dumb Assumption E J (12:35pm EST Thu Feb 07 2002)
I don't program, I just use it like I don't fix my car I just drive it. I'd rather spend time helping my productivity than programming it. Sound like you have a fine toy there ? – by ThePostman
|Linux (12:36pm EST Thu Feb 07 2002)
I just don't get it, I have tried installing Linux and using it many times. But I just keep going back to Windows. It could be cause every freakin company in the world uses it, but still, I can't VPN into work with Linux, I can't make PS2 backups with it, I can't use Visual Interdev with it. What the hell do I need it for? – by SpottedOwlEater
|E J you dumb idiot (12:39pm EST Thu Feb 07 2002)
You just don't get do ya ? I use the PC to write proposals, contracts, communicate and get rich. Sounds like your little linux is just a toy to muck with at the command prompt somewhere is a dim lit room with no windows, cans of tab and a bag of doritos. – by ThePostman
|Arg (12:41pm EST Thu Feb 07 2002)
ThePostman/SpottedOwlEater (whom are the same person I'm guessing) is just another Windows hater… why is he “talking up windows” to make windows people look stupid. GO ahead.. keep doing it, the only person you are making look stupid is yourself – by Watson
|Accounting 101 (12:50pm EST Thu Feb 07 2002)
How can a large increase in corporate spending on security be an economy booster? The funds that go to the security companies don't just come oout of thin air.
Having 95% of the corporations paying the other 5% for security “solutions” takes funds away from R&D, employee benefits, training, maintenance, etc., etc.
Calling an additional budget load an economy booster seems like an “aggressive accounting practice.” – by DrunkenMonkey
|Multi-story threading. (12:56pm EST Thu Feb 07 2002)
Could you two please take your childish mud slinging back to the original thread that you managed to run 180 or so nonsense, unrelated comments on? Real geeks are really hating to dig through your trash to find intelligent comments. – by RatherNotSay
|2 years: security, the new economic killer (1:07pm EST Thu Feb 07 2002)
What happens when all the people that jump on the 'yay security' train realize that no piece of software can ever truly be secure? – by fishbert
|STOP IT (1:13pm EST Thu Feb 07 2002)
This is getting really silly. Why don't you guys just leave, please?
Anyway, I feel that it's about time that companies realize the impotance of security. I've worked at places where the employees keep their system password on a post-it not stuck to their monitor. When you try to enforce people to change their password you might as well be smacking them in the face. Maybe now these companies will take us IT guys seriously.
|Linux vs. Windows (1:25pm EST Thu Feb 07 2002)
I've used Windows for over 10 years and until last year I thought there was nothing better. Then I tried Linux again and again until I found some good books on it and learned just how much BETTER it is then Windows.
Windows is great for grandmas and office yuppies who know NOTHING or dont't care to know anything about operating systems.
If you plan to do real admin work then you better learn to use what the big boys play with.
All you windows lovers. When you take the time to learn about Linux, you will see that it makes more sense and is easier to use than windows and is 100x more powerful and manipulative. Until then, do yourself and everyone else a favor and shut up until you know exactly what you are talking about.
– by MrX
|SpottedOwlEater (2:02pm EST Thu Feb 07 2002)
“The last thing I heard was that Dell stopped offering Linux as an OS choice on new machines. This is a sign that Linux is on it's way out.”
Ah. And I guess that China scrapping Windows for Linux is also a sign that Linux is on it's way out.
This site is starting to become really crap, kinda like slashdot.
– by EeK!
|byThePostman (2:20pm EST Thu Feb 07 2002)
“I use the PC to write proposals,
contracts, communicate and get rich.”
Sounds like a Enron person running away with our retirement savings.
I am using linux (cheapest way) to help people get off unemployment and improve their network and system *nix skills and Oracle database (it is free to download for Educational purposes). Check the employment paper, they are paying good money for those skills.
|EeK! (2:52pm EST Thu Feb 07 2002)
“Ah. And I guess that China scrapping Windows for Linux is also a sign that Linux is on it's way out.”
– well, those cheap bastards can't afford to use a real OS
“This site is starting to become really crap, kinda like slashdot.”
|What??? (3:08pm EST Thu Feb 07 2002)
What makes you think Linux is not a real O/S. When in fact, it is a superior one.
Since Linux is basically Unix, it has 30 yrs of maturity under it's belt while Windows has a few months with XP. XP is great and more stable than previous, but it holds no candle to *nix.
Like I said…KNOW WHAT YOU ARE TALKING ABOUT.
Oh Yeah…besides China, who else can afford to pay for all M$ products and still have food on the table.
Remember all you pirates, if you were forced to pay for it, you'd think twice.
|gotta remember (3:14pm EST Thu Feb 07 2002)
that pretty much sums up this whole conversation.. – by googoogaagaa
|none (3:49pm EST Thu Feb 07 2002)
I feel fortunate to actually get a legitimate education in security. I do hope the jobs for someone with a computer forensics major is available in private sector when I finish. – by slack
|remember gotta (3:55pm EST Thu Feb 07 2002)
did you remember that i still like ice cream??..
not just vanilla, but that real stuff, chocolate – by gaagaagoogoo
|Recommendation: Slack (4:20pm EST Thu Feb 07 2002)
Get a co-op job for experience with a company that needs computer forensics. Maybe try to get co-op job with some group like the NSA ( ) and when you graduated you have the experience for a job in the private sector. – by E J
|I scream (5:47pm EST Thu Feb 07 2002)
we all scream
for ice cream
Nuff said! – by IceScream
|Question (6:01pm EST Thu Feb 07 2002)
Because our Division Manager is not an idiot like most, I come in early to work and make sure that the 30 computers in the office get their daily visit to McAfee or Symantec to look for new virus strings. I do the same at home [twice daily].
We haven't had a virus problem in 28 months.
Can I call myself a Computer Security Professional and head off to the land of big bucks?
– by DeafDude
|Re: ThePostman (6:10pm EST Thu Feb 07 2002)
“I don't program, I just use it like I don't fix my car I just drive it”
Sounds like a bad car owner. No maintence of the car. With his ignorance of the car's operation. He is a good candidate to be ripped off by
Sounds like Microsoft. “You need Office XP. It has features more than Office 2000 that you will never use but you should buy it because you are an ignorant putz.” – by E J
|EJ (6:13pm EST Thu Feb 07 2002)
..likes icecream too.. – by Linucks
|Ice Cream (11:02pm EST Thu Feb 07 2002)
A debate over which ice cream flavor yes there must be only one which will please all. I vote for Daisy Fuentes flavored ice cream. I'm sure the food critic would agree with me. – by Not Impressed
|slack (11:20pm EST Thu Feb 07 2002)
You are the future. Don't bother with government agencies as EJ said. Get in with a bank or any other government regulated firm that legally MUST BE secure. The government is quite a bit harder on us than they are on themselves when it comes to security — and the government doesn't have the kind of money that we have! -)~
I'd be happy to welcome you to our team here at a top 10 credit card issuer. Just find out what my email address is and email me. BTW I'm posting at home, so to speak. Should be easy for a trained professional.
Slack said,”Can I keep you…”
Maybe I can keep you…
– by Baarod/Scott Charney