Layer 8

Security is fundamentally about people, and everything we know about people is relevant to security. -- B. Schneier

That new startup smell.

There’s a certain kind of smell I love:  the smell of a new building, with the paint and the polished wood and new carpeting.  It usually gets concentrated best in these small office parks where the buildings look like two-story cottages.  It reminds me of the startups I used to be in.  Ah, those were the days ...

Speaking only tangentially of startups, Chris Harrington makes a good point I’ve noticed myself.  Not only do I have trouble differentiating vendors’ products, they have trouble differentiating themselves.  I spent some time quizzing a SIEM vendor rep, and every time he said, “We’re the only ones who do X,“ I’d sweetly name some other vendors who were also doing the same thing.  Why aren’t they doing their homework and at least reading their competitors’ brochures?

Next up on This Old App:  building generalized algorithms for user enrollment business rules.

UPDATE:  Whatever Amrit’s on, I’ve got to make sure he gets more of it.

Nobody understands us, the executives seem to ignore security, the business owners want to focus on profits or other nonsense completely irrelevant to the seasoned IT security professional, the users seem oblivious to the malware laden websites dripping with fresh bot-infected, backdoor, keyword snarfing doodoo, and some jackass from a fortune 100 tech firm has convinced upper management that driving a CMDB across an ITIL landscape will allow us to ride atop a mighty horse of SLA metric goodness to the forbidden city of IT nirvana where operational efficiencies coalesce with the zenith of perfect security – breath[e] it in friends!

I’m just trying to picture Andrew Jaquith jousting atop a “mighty horse of SLA metric goodness,“ with Alex Hutton hauling in the powerful and terrifying FAIR Trebuchet.

 

Posted by shrdlu on Thursday, May 31, 2007
(4) CommentsPermalink blogmarks Favicon del.icio.us Favicon Digg Favicon Fark Favicon Furl Favicon Google Bookmarks Favicon StumbleUpon Favicon Technorati Favicon TailRank Favicon

Next entry: Generic business rules.

Previous entry: EOM roundup.

Comments

pa5kl Netherlands on 05/31  at  03:50 PM:

Sounds familiar. I was in a SIEM product selection track, which ended in selecting Cisco’s MARS. When we informed the other shortlisted vendors, a major one (Gartner Magic Quadrant, top-right) wasn’t even aware of Cisco being a player in that market. Come on? Hello! Cisco has 7500 units sold and is getting more and more leverage. How can you miss something like that?

shrdlu United States on 05/31  at  03:56 PM:

Although to be fair, MARS is a SIEM the same way that a Yugo is a racecar ...

pa5kl Netherlands on 05/31  at  04:01 PM:

It is getting better smile However, your point is a good one. MARS provided something we really needed: log consolidation, basic analysis and some custom reporting for a very reasonable price. The particular organization had no need to be compliant to any of the big frameworks (SOX, PCI DSS, etc.) so the audit functionality didn’t have to be all that elaborate. Combined with the fact that this client ran an almost 100% Cisco operation with relatively simple Windows servers, Cisco MARS fitted the bill.

dan United States on 06/04  at  04:44 PM:

I love it, mostly because seattle is really picking up, 60 stealth mode startups, and dozens of startups just coming out of stealth mode. More subdued than 1999/2000, but overall way too much fun to be here right now. Things are looking good, and the wedensday morning meet with entrepreneurs over coffee in eastlake is fun to say the very least.

Page 1 of 1 pages

Add a comment

Name:

Email:

Location:

URL:

Smileys

Remember my personal information

Notify me of follow-up comments?

Submit the word you see below: