Security 2007 - A look ahead
January 1st, 2007First of, I want to wish all our readers, supporters and contributors a happy new year and all the best for 2007!
In the past I’ve challenged myself in predicting what kind of technologies, threats and solutions will make it big in the future. Until now I’ve only shared that with my friends and associates. This time I’m doing it publicly. So in a year from now you can rate my “visions”.
- In 2006 we saw a shift from traditional email based attacks towards browser based attacks. I believe we’ll continue to see this behavior. While Vista and new technologies like browser virtualizers might offer some relief - the vast majority of unsuspecting private users will still be extremely vulnerable to these kind of attacks.
- Data leak prevention technologies will become mainstream. Not only will we see additional mergers and acquisitions (as bigger security vendors start to realize the importance of that technology), IT departments will be moving from testing or evaluating data loss prevention technologies into actual deployments.
- Phising in particular Spear Phising will get worse and more malicious. I wouldn’t be surprised if we’ll see an even bigger increase in targeted attacks against high profile and high net-worth individuals.
- We’ll have 200 Million exposed identities by the end of 2007 - one way or the other. Unfortunately that might be the easiest one to predict. Although deep inside I’m hoping it’s not going to happen, looking at the recent incidents only a massive and rapid “divine” intervention program from our lawmakers will be able to stop it.
- New Identity Standards such as OpenID will catch on in a significant way. Stay tuned as we have a story coming up that particular subject.
That’s it for now, maybe I’ll come back later and add some additional ones.
2 Comments
Comments RSS TrackBack Identifier URI
Leave a comment
OpenID will be big and the story goes well beyond what vendors are up to as folks from large enterprises are also participating...
In a way I was always hoping Project Liberty could provide what OpenID is doing now. But it's good to see that the Liberty folks are also participating with OpenID.