LOGIN | REGISTER NOW | SUBSCRIBE
 

Industry Watch: Opening the door ... carefully


By David Rubinstein
Email    print   
December 1, 2008 —  (Page 1 of 2)
Application and IT security has been thought of as a gate and a guard, a way to keep hackers at bay and to protect intellectual property. But IBM’s Kris Lovejoy, director of corporate security strategy, sees security as an enabling technology, a way to let the good guys in to facilitate business.

“If you ask a CIO what he wants his company to be when it grows up, he’ll tell you he wants a globally integrated enterprise. He wants access to new markets, to take advantage of offshore suppliers with lower cost structures, to move employees to teleworking, to reduce brick-and-mortar locations, and to let consumers access their products and services with smart devices,” she said.

But in order for that to happen, Lovejoy said, security functionality must be baked into the architecture and the development process.

Lovejoy presented IBM’s Security Technology Outlook at the company’s recent Security Summit. The paper offers a specific dive into the technology set required for high-level company executives to achieve their goals. It’s based on surveys and other data gathered from such executives and is available at IBM's website.

One of the nine trends cited for application development (many of the trends look at security from an IT standpoint) discusses the predictable security of applications. Lovejoy described this as common sense for risk management. “To have a securely built application, you need a good process about how you build it, how you test it and how you release it,” she said. “You need to implement a security policy and require developers to adhere to that policy.”

What you end up with, Lovejoy explained, is a beefed-up release management process with vulnerability testing and greater QA.

From an application development policy process, Web 2.0 and its composite applications have allowed vulnerabilities to be introduced into production environments much more quickly  than was the case in the past. Composite applications “have been great for developer efficiency,” Lovejoy said, “but who’s to say that’s a good widget they’re grabbing?”


Related Search Term(s): security

Pages 1 2 


Share this link: http://sdt.bz/33073
 
Most Read Latest News Blog Resources
Branching and merging: the heart of version control
Providers hold their own views of the landscape, but the Git SCM system is drawing looks from them all
Not so fast when it comes to testing in the cloud
Developers face outsourcing, virtual lab management and mobile devices as obstacles
Microsoft pivots toward business intelligence
The goal is to make business intelligence accessible "to the masses"
From the Editors: Node.js is unruly, but that’s where the fun is
The time to get involved with Node.js is now; Hadoop is about to break its own barriers
Digg!  Digg
Reddit  Reddit
Slashdot  Slashdot
Share on facebook  Facebook
Share on Twitter  Twitter


Add comment


Name*
Email*  
Country     


  • Comment
Loading




close
NEXT ARTICLE
Cigital Develops Ready-to-Use Tools for Securing the Smart Grid
Cigital Inc. announced the release of the Guide to Developing a Cyber Security and Risk Mitigation Plan Read More...
 
 
 
 
News on Monday
more>>
SharePoint Tech Report
more>>


   

 
 

Download Current Issue
FEBRUARY 2012 PDF ISSUE

Need Back Issues?
DOWNLOAD HERE

Want to subscribe?


 
blogs tab
GitHire: Use Headhunters to Find Your Perfect Programmer
Are you a hiring manager tired of scouring the job boards? Check out this new service that will find 5 people interested in your jobs.
02/03/2012 12:17 PM EST

Facebook claims hacker cred
Facebook's SEC S-1 filing form includes a short essay on the Hacker Way by Mark Zuckerberg himself.
02/02/2012 08:26 AM EST

Ryan Dahl steps down
Ryan Dahl, creator of Node.js, steps back from his position as gatekeeper for the project.
02/01/2012 04:58 PM EST

Bloomberg opens its API
Bloomberg's APIs could lead to a future standard for accessing market data.
02/01/2012 04:41 PM EST

The case for piracy
In the aftermath of SOPA and PIPA, some copyright holders have begun to embrace piracy as inevitable...and even beneficial.
01/30/2012 02:39 PM EST

Tablet sales boom, but applications lag
The installed base of tablet computers and e-book readers is growing rapidly, but no killer app has yet emerged -- hint, hint.
01/28/2012 05:48 PM EST

 
Events calendar tab
Cloud Connect
2/13/2012 to 2/16/2012
Santa Clara
TechWeb

SPTechCon: The SharePoint Technology Conf.
2/26/2012 to 2/29/2012
San Francisco
BZ Media

RSA Conf.
2/27/2012 to 3/2/2012
San Francisco
RSA

IBM Pulse Conf.
3/4/2012 to 3/7/2012
Las Vegas
IBM Tivoli

Game Developer Conf.
3/5/2012 to 3/9/2012
San Francisco
TechWeb