These guys are just as wrong as the geniuses that claim all you need is a firewall at the perimeter. Neither approach is correct (securing only the endpoint or securing only the perimeter), and neither provides a defense in depth. Securing both the endpoints and the perimeter are, and have been, critical for as long as I've been in technology. Anyone in a securty role making any other claim to their employer should be fired for gross incompetence.
About the only thing the Jericho forum members managed to get right is that the traditional idea of a clear line between the trusted and untrusted network has disappeard entirely. But that's been a blurry line, at best, for as long as the concept existed.
Post new comment