Issue No.05 - September/October (2010 vol.8)
Bruce Potter , The Shmoo Group
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/MSP.2010.157
Business leaders must accept that today's investments in information security might not have short-term, easy-to-measure returns. Rather, this is an evolving battlefield, and we might not see the gains for years. Although this situation is unsatisfying, it's the sad reality. Information security professionals must do the best they can, even though it won't be sufficient to make us successful.
threat environment, security strategy, corporate security, malware, APT, advanced persistent threat, security and privacy
Bruce Potter, "Necessary but Not Sufficient", IEEE Security & Privacy, vol.8, no. 5, pp. 57-58, September/October 2010, doi:10.1109/MSP.2010.157