Greg Young

Gartner’s annual big security event is being held 28 June-1 July 2009 near Washington, DC. 
This event about enterprise security professionals having access to analysts and their unbiased research, and there is access to security vendors through a showfloor and solution sessions.  At least that is what my take on it is after having been [...]

[Read more →]

The Gartner security analyst teams track a lot of companies -  hundreds and hundreds of security companies.  I track about 65 network firewall and related product companies alone (some I have heard from only once, other I get several inquiries about each day).  For a while I was getting emails with subject lines of "YAWAF" [...]

[Read more →]

The Gartner Senior Research Board gave me approval to research a Magic Quadrant on Web Application Firewalls (WAF).  The publishing target is Q4. 
The WAF market wasn’t ready for a MQ or MarketScope last year.  I published a research note "Introduction to Web Application Firewalls", whose title is a bit of an exonym as it [...]

[Read more →]

The Financial Post detailed the $1M fine paid by a Celestica outsourcing strategist for surreptitiously reading employees’ emails, including those of senior management.
The less jaded would say wow – a great fine and a win against doers of tomfoolery with the computers.  But no! The former employee was only fined because he traded on insider [...]

[Read more →]

The CBC radio program Q hosted scholar of the con Ricky Jay (podcast here). 
Ricky told a great story about a guy who leaves his dog with a bartender for a few minutes.  Another guy comes in and raves about the dog claiming it is a rare breed and would pay $600 for it and [...]

[Read more →]

I enjoyed Brian Krebs’ article "Oprah, KFC, and the Great PC Cleanup".  
OK – the emperor has no clothes: it is self-evidently wrong that there are so many unprotected PCs on our Internet.  Even unsophisticated malware has a bountiful harvest of unpatched and unprotected PCs.  I like Brian’s suggestion about Oprah viewers, but I think [...]

[Read more →]

After two weeks away on vacation, here is what I didn’t miss hearing about:

Cloud security
Grasping, tenuous links between some vendors’ IT security products and Swine Flu
Cloud security
Those ’special’ RSA Conference press releases with exclamation marks and inappropriate capitalization
Cloud security

[Read more →]