Virtual Security Won't be Solved by Legacy Tools
Organizations keeping up with new technology trends by bringing in more mobile devices, cloud computing models and virtualization and other tools, may have an edge over their competition but could be in trouble if cyber security hasn't been updated.
Organizations that have been keeping up with new technology trends by bringing in more mobile devices, embracing cloud computing models and virtualization, among other modern tools, may have an edge over their competition, but they could be in trouble if cyber security hasn't been updated. Michael Darlington, technical director of Trend Micro, wrote on SC Magazine that these new pieces of technology have been rapidly developed and adopted in a dire need to save money from the budget, creating the need for enterprises to conduct due diligence and insure they are getting the best possible tools, but businesses cannot forget about the security aspects, as what may seem like a minor breach could have major consequences.
Darlington highlighted a recent report from Trend Micro and Vanson Bourne which found those who rush into cloud or other high-tech programs may find more security risks than they had bargained for. More than a quarter of the IT professionals surveyed said security was not given enough attention during the virtualization process and just 16 percent said it had been treated as a backbone to a project. There were also struggles with cloud computing down the line, as 39 percent said using infrastructure-as-a-service made it more difficult to manage security.
"Just as worrying, interviewees felt that the virtualized environment was more complex and that this had made systems harder to manage," Darlington said. "The vast majority (96 percent) said they were struggling to manage these more complex IT infrastructures, and one in five said that patch management was now more difficult in the virtualized environment."
Market to see a growth
Although many struggle to keep up their level of security, Gartner forecasted the worldwide market will reach $67.2 billion by the end of 2013, which is up 8.7 percent from 2012. By 2016, the firm expects the security industry to be worth more than $86 billion, showing that many are taking this issue a bit more serious.
Ruggero Contu, research director at Gartner, said IT security is one of the top areas of concern and the prospect of more growing technology means complexity and targeted attacks will likely rise as well. Organizations must be prepared for this, as not only are there issues of security to deal with, but many industries have heavy regulations and compliance that must be abided.
"To support the growing need for security analytics, changes in information security people, technologies, integration methods and processes will be required, including security data warehousing and analytics capabilities, and an emerging role for security data analysts within leading-edge enterprise information security organizations," said Eric Ahlm, research director at Gartner.
New technology need not translate into problems
Even though there will be more security issues to make up for with new technology making its way into business, Darlington wrote that this does not mean organizations will suffer problems simply because they decided to adopt a BYOD (Bring your own Device) strategy or start using cloud computing. Organizations will need to update as soon as possible, as 85 percent told Trend Micro they were using the same tools to secure the virtualized infrastructure as they were physical.
"Despite the need for greater security, they had stuck with their old anti-virus, intrusion detection and firewalls, even though the environment in which they were operating had been completely overhauled," he wrote. 'No wonder then that they were struggling to manage their security with inappropriate tools, and that they felt they were more vulnerable to a future breach."
Adopting the correct tools will help make up for a lot, as it will be possible to create a single cyber security model across the entire company instead of worrying about silos and data in different environments by having centralized controls.
Data Security News from SimplySecurity.com by Trend Micro.
Cloud Security , Web Threats, Mobility, Privacy & Policy , Data Privacy