- Mythbuster busts his own tale
- 10 open source companies to watch
- Sony recalls 73,000 Vaio laptops
- Tool to evade China's Web censorship
- Chrome and Firefox and add-ons
Newsletters | Podcasts | Chats | Opinions | RSS Feeds | This Week In Print | IT Careers | Community | Reports | Downloads | Slideshows | New Data Center
Partner Sites:App Performance | On Demand Security | Networking Solution | SOA | Value of WDS
Big Blue is trying to succeed in the less familiar terrain of network and desktop security — and finding that a few high-profile moves aren’t enough to sway some skeptical analysts.
Slideshow: Five cool IBM security research projects
When IBM acquired Internet Security Systems (ISS) a year ago, the industry’s mixed reaction included that of Gartner security analyst John Pescatore, who said it doesn’t “make sense for IBM to own network-security products.”
IBM pushed forward nevertheless, striking a deal to buy Web-application security vendor Watchfire last June. In early November IBM said it will spend $1.5 billion on security in 2008, and announced several new products and services for data security and compliance with the Payment Card Industry Data Security Standard. That sum is thought to be twice as high as IBM’s previous security spending.
IBM’s latest move, announced Thursday this week, boosted its data-protection portfolio with the acquisition of Arsenal Digital Solutions, which provides services for server and PC data protection, backup and recovery, business continuity, and regulatory compliance.
Pescatore still thinks IBM should take it slow, saying that the fact IBM has expertise in providing IT infrastructure doesn’t mean it should be selling products that react to security threats.
Fraud detection and fraud management are areas that would make sense for IBM, but “the area we don’t think they should go [into] is more network security stuff, like buying a firewall company or getting into antiviral software,” Pescatore says.
IBM does provide antivirus software in IBM ISS’ desktop offering. Moreover, IBM intends to be “the dominant security player” in a market that’s ripe for consolidation, says Peter Evans, vice president of marketing at IBM ISS. A big enterprise that buys security products from dozens of vendors might have an easier time managing those tools if they all came from one vendor, or from just a few, Evans notes. Much of the $1.5 billion IBM plans to spend on security will focus on creating integrations between various security products, he says.
Some analysts are wary of IBM’s increased focus on security, but others say there’s no one better at protecting IT systems than Big Blue. “I think IBM is more focused on security than anybody you would meet in the IT marketplace,” says analyst Bob Djurdjevic, president of Annex Research.

Gartner summarizes its view on Application Delivery Controllers, evaluates strengths and weaknesses...
Vulnerability Management For DummiesDownload this concise book "Vulnerability Management for Dummies," to learn about the simple steps...
The ROI and TCO Benefits of Data Deduplication for Data Protection in the EnterpriseThis paper examines and quantifies the costs and benefits of backup with deduplication storage as...

Life on the edge of your WAN has changed dramatically. With the need to deliver advanced services,...
PoE Plus: Impact on the PoE MarketThe standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...
Harnessing the power of communications to increase workplace performanceDue to the convergence of IT and telecommunications technologies, the business workplace has been...

We have so many holes punched in our firewalls today that many industry insiders question the value...
The self-managed networkWe aren't there yet, but advances in network and systems management tools are making it possible to...
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comments (1)
RE: IBM's security stance: underrated or overambitious?By tuomoks on December 7, 2007, 8:31 pmMaybe both? First, as the article mentions, IBM mainframe has been and still is the most secure environment you can get. They have always(?) taken security seriously,...
Reply | Read entire comment
View all comments